The vulnerability of the network software tool Envoy, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the network software tool Envoy is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions...

The vulnerability of the network software tool Envoy, related to insufficient verification of data authenticity, allows a hacker to gain access to protected information.

The vulnerability of the network software tool Envoy is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerability of the network software tool Envoy, related to authentication errors, allows a hacker to gain access to protected information.

The vulnerability of the network software tool Envoy is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

CVE-2020-35470

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter not HTTP filters...

CVE-2020-35471

A NULL pointer dereference vulnerability was found in Envoy. During the handling of truncated or dropped UDP datagrams, this flaw allows an attacker to specify the length of the packet to be larger than 1500 bytes and cause the envoy proxy process to segfault, resulting in a denial of service. Th...

CVE-2020-35471

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

CVE-2020-35470

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter not HTTP filters...

CVE-2020-35470

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter not HTTP filters...

CVE-2020-35471

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

Design/Logic Flaw

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

Design/Logic Flaw

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter not HTTP filters...

CVE-2020-35470

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter not HTTP filters...

CVE-2020-35470

CVE-2020-35470 — Envoy Proxy : This vulnerability arises in Envoy before 1.16.1, which logs an incorrect downstream address by only considering the directly connected peer instead of the information in the proxy protocol header. It affects scenarios using tcp-proxy as the network filter (not HTTP...

CVE-2020-35471

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

CVE-2020-35471

Envoy prior to 1.16.1 is affected by CVE-2020-35471 due to mishandling dropped and truncated UDP datagrams, demonstrable as a segmentation fault when UDP packet size exceeds 1500. Publicly documented fixes indicate upgrading to a release containing the patch (e.g., OpenSUSE/SUSE advisories and OS...

PT-2020-17337 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.16.1 Description: The issue is related to the mishandling of dropped and truncated datagrams, which can cause a segmentation fault when a UDP packet size exceeds 1500. Recommendations: For Envoy versions prior to...

PT-2020-17336 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.16.1 Description: The issue arises when Envoy logs an incorrect downstream address, considering only the directly connected peer and not the information in the proxy protocol header. This specifically affects...

Envoy 安全漏洞

Envoy is an open source distributed proxy server . A security vulnerability exists in versions prior to Envoy 1.16.1 that stems from logging an incorrect downstream address because it only considers directly connected peers and not the information in the proxy protocol header. This affects cases...

Envoy 安全漏洞

Envoy is an open source distributed proxy server . A security vulnerability exists in versions prior to Envoy 1.16.1 that stems from incorrect handling of dropped and truncated datagrams, as evidenced by a UDP packet size greater than 1500 segmentation error. No details of the vulnerability are...

Photon OS 1.0: Envoy PHSA-2020-1.0-0335

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0335. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141859...