Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object results in stack overflow when deeply O(100K) nested objects are present. This vulnerability is fixed in 1.35.11, 1.36.7, 1.37.3, and 1.38.1.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HEnvoyproxy Envoy
APPEnvoyproxy1.18.0 – 1.35.13 (excl.)1.36.0 – 1.36.9 (excl.)1.37.0 – 1.37.5 (excl.)1.38.0 – 1.38.3 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2022-29226CRITICAL10.0PL ✓same product
Envoy OAuth filter: pominięcie walidacji access tokena umożliwia nieautoryzowany dostęp
CVE-2019-18801CRITICAL9.8PL ✓same product
Envoy 1.12.0: zapis poza buforami żądania HTTP/2 prowadzący do RCE lub bypass ACL
CVE-2019-18802CRITICAL9.8PL ✓same product
Bypass mechanizmów kontroli dostępu przez białe znaki w nagłówkach HTTP w Envoy
CVE-2023-44487HIGH7.5⚠ KEVsame product
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can ...
CVE-2026-47220HIGH7.5PL ✓same product
Envoy Proxy: NULL pointer dereference powodujący crash przy braku nagłówka hosta