Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2021-28682

Disclosure Date: May 20, 2021 (last updated February 22, 2025)
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large grpc-timeout value leads to unexpected timeout calculations.
Attacker Value
Unknown

CVE-2021-28683

Disclosure Date: May 20, 2021 (last updated February 22, 2025)
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.
Attacker Value
Unknown

CVE-2021-29258

Disclosure Date: May 20, 2021 (last updated February 22, 2025)
An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion.