Envoyproxy: >> Envoy >> 1.15.0 Security Vulnerabilities
Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500.
CVSS Score
7.5
EPSS Score
0.001
Published
2020-12-15
Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.
CVSS Score
8.3
EPSS Score
0.001
Published
2020-10-01
Page 5