HIGH🇵🇱 Wersja polska

CVE-2026-47220

CVSS 7.5v3.1pub. 2026-06-26upd. 2026-06-30

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, when the %REQUESTED_SERVER_NAME(X:Y)% is used in log format and host related options is specified, like HOST_FIRST, SNI_FIRST, it's possible to crash Envoy when the specified host header is missing in the request headers. This vulnerability is fixed in 1.37.5 and 1.38.3.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Envoyproxy Envoy

    APP
    Envoyproxy
    1.37.0 – 1.37.5 (excl.)1.38.0 – 1.38.3 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-29226CRITICAL10.0PL ✓same product

Envoy OAuth filter: pominięcie walidacji access tokena umożliwia nieautoryzowany dostęp

CVE-2019-18801CRITICAL9.8PL ✓same product

Envoy 1.12.0: zapis poza buforami żądania HTTP/2 prowadzący do RCE lub bypass ACL

CVE-2019-18802CRITICAL9.8PL ✓same product

Bypass mechanizmów kontroli dostępu przez białe znaki w nagłówkach HTTP w Envoy

CVE-2023-44487HIGH7.5⚠ KEVsame product

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can ...

CVE-2026-48042HIGH7.5PL ✓same product

Envoy Proxy: stack overflow przy głęboko zagnieżdżonych obiektach JSON