Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability - CVE-2021-39162 - Vulnerability Database
Envoy Proxy

Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability - CVE-2021-39162

High
Reference: CVE-2021-39162
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-39162
Title: Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability
Overview:

Pomerium is an open source identity-aware access proxy. Envoy which Pomerium is based on can abnormally terminate if an H/2 GOAWAY and SETTINGS frame are received in the same IO event. This can lead to a DoS in the presence of untrusted upstream servers. 0.15.1 contains an upgraded envoy binary with this vulnerability patched. If only trusted upstreams are configured there is not substantial risk of this condition being triggered.