Vulnerabilities > Envoyproxy > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-06-09 CVE-2022-29224 NULL Pointer Dereference vulnerability in Envoyproxy Envoy
Envoy is a cloud-native high-performance proxy.
network
high complexity
envoyproxy CWE-476
5.9
2022-02-22 CVE-2021-43824 NULL Pointer Dereference vulnerability in Envoyproxy Envoy
Envoy is an open source edge and service proxy, designed for cloud-native applications.
4.3
2022-02-22 CVE-2021-43825 Use After Free vulnerability in Envoyproxy Envoy
Envoy is an open source edge and service proxy, designed for cloud-native applications.
network
low complexity
envoyproxy CWE-416
5.0
2022-02-22 CVE-2021-43826 Use After Free vulnerability in Envoyproxy Envoy
Envoy is an open source edge and service proxy, designed for cloud-native applications.
4.3
2022-02-22 CVE-2022-21654 Improper Certificate Validation vulnerability in Envoyproxy Envoy
Envoy is an open source edge and service proxy, designed for cloud-native applications.
6.8
2022-02-22 CVE-2022-21655 Always-Incorrect Control Flow Implementation vulnerability in Envoyproxy Envoy
Envoy is an open source edge and service proxy, designed for cloud-native applications.
4.3
2022-02-22 CVE-2022-21656 Type Confusion vulnerability in Envoyproxy Envoy
Envoy is an open source edge and service proxy, designed for cloud-native applications.
network
high complexity
envoyproxy CWE-843
5.9
2022-02-22 CVE-2022-21657 Improper Certificate Validation vulnerability in Envoyproxy Envoy
Envoy is an open source edge and service proxy, designed for cloud-native applications.
network
low complexity
envoyproxy CWE-295
4.0
2022-02-22 CVE-2022-23606 Uncontrolled Recursion vulnerability in Envoyproxy Envoy 1.21.0
Envoy is an open source edge and service proxy, designed for cloud-native applications.
network
low complexity
envoyproxy CWE-674
4.0
2021-09-09 CVE-2021-39206 Incorrect Authorization vulnerability in multiple products
Pomerium is an open source identity-aware access proxy.
network
low complexity
envoyproxy pomerium CWE-863
5.0