Vendor/product archive

cncf / envoy CVEs

Beta · best-effort

3 CVEs tagged to cncf / envoy — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to cncf vendor archive

CVE-2020-8664

Published Mar 4, 2020

CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret (e.g. trusted CA) across many resources together with…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-8661

Published Mar 4, 2020

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2020-8659

Published Mar 4, 2020

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e. 1 byte) chunks.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1