Vulnerabilities > Envoyproxy > Envoy > 1.13.5

DATE CVE VULNERABILITY TITLE RISK
2020-12-15 CVE-2020-35471 Unspecified vulnerability in Envoyproxy Envoy
Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500.
network
low complexity
envoyproxy
7.5
7.5
2020-12-15 CVE-2020-35470 Unspecified vulnerability in Envoyproxy Envoy
Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header.
low complexity
envoyproxy
8.8
8.8
2020-04-15 CVE-2020-11767 Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue.
network
high complexity
istio envoyproxy
3.1
3.1