Vulnerabilities > CVE-2020-35471 - Unspecified vulnerability in Envoyproxy Envoy
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500.
Vulnerable Configurations
References
- https://github.com/envoyproxy/envoy/compare/v1.16.0...v1.16.1
- https://github.com/envoyproxy/envoy/compare/v1.16.0...v1.16.1
- https://github.com/envoyproxy/envoy/issues/14113
- https://github.com/envoyproxy/envoy/issues/14113
- https://github.com/envoyproxy/envoy/pull/14122
- https://github.com/envoyproxy/envoy/pull/14122