Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability - CVE-2022-21655 - Vulnerability Database
Envoy Proxy

Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability - CVE-2022-21655

High
Reference: CVE-2022-21655
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-21655
Title: Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability
Overview:

Envoy is an open source edge and service proxy designed for cloud-native applications. The envoy common router will segfault if an internal redirect selects a route configured with direct response or redirect actions. This will result in a denial of service. As a workaround turn off internal redirects if direct response entries are configured on the same listener.