Lucene search
GoogleOSV:CVE-2021-43824HistoryFeb 22, 2022 - 11:15 p.m.
CVE-2021-43824
2022-02-2223:15:10
Google
osv.dev
8
envoy
denial of service
crafted request
jwt filter
upgrade
cloud-native applications
Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT request is sent to JWT filter configured with regex match. This provides a denial of service attack vector. The only workaround is to not use regex in the JWT filter. Users are advised to upgrade.
Related
veracode
veracode
Denial Of Service (DoS)
2022-06-02 20:45:04
osv
osv
BIT-envoy-2021-43824
2024-03-06 10:56:58
Multiple security issues in Pomerium's embedded envoy
2022-03-01 22:04:17
prion
prion
Design/Logic Flaw
2022-02-22 23:15:00
nvd
nvd
CVE-2021-43824
2022-02-22 23:15:10
redhatcve
redhatcve
CVE-2021-43824
2022-02-23 02:35:32
cvelist
cvelist
CVE-2021-43824 Null pointer dereference in envoy
2022-02-22 22:15:10
cve
cve
CVE-2021-43824
2022-02-22 23:15:10
github
github
Multiple security issues in Pomerium's embedded envoy
2022-03-01 22:04:17
redhat
redhat
nessus
nessus
RHEL 8 : Red Hat OpenShift Service Mesh 2.1.2 (RHSA-2022:1275)
2022-04-08 00:00:00
RHEL 8 : Red Hat OpenShift Service Mesh 2.0.9 (RHSA-2022:1276)
2022-04-08 00:00:00