CVE-2022-21655
22.02.2022, 23:15
Envoy is an open source edge and service proxy, designed for cloud-native applications. The envoy common router will segfault if an internal redirect selects a route configured with direct response or redirect actions. This will result in a denial of service. As a workaround turn off internal redirects if direct response entries are configured on the same listener.Enginsight
Vendor | Product | Version |
---|---|---|
envoyproxy | envoy | 𝑥 < 1.18.6 |
envoyproxy | envoy | 1.19.0 ≤ 𝑥 < 1.19.3 |
envoyproxy | envoy | 1.20.0 ≤ 𝑥 < 1.20.2 |
envoyproxy | envoy | 1.21.0 ≤ 𝑥 < 1.21.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References