high7.5
CVE-2021-28683
An issue was discovered in Envoy through 1.71.1.
Impact
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Envoyproxy | Envoy | Versions 1.16.2, 1.17.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.envoyproxy.io
- https://github.com/envoyproxy/envoy/releases
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-r22g-5f3x-xjgg
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-xw4q-6pj2-5gfg
- https://blog.envoyproxy.io
- https://github.com/envoyproxy/envoy/releases
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-r22g-5f3x-xjgg