Количество 9
Количество 9

CVE-2023-27491
Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, There is a possibility that non compliant HTTP/1 service may allow malformed requests, potentially leading to a bypass of security policies. This issue is fixed in versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9.

CVE-2023-27491
Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, There is a possibility that non compliant HTTP/1 service may allow malformed requests, potentially leading to a bypass of security policies. This issue is fixed in versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9.
CVE-2023-27491
Envoy is an open source edge and service proxy designed for cloud-nati ...
ELSA-2023-23649
ELSA-2023-23649: olcne security update (IMPORTANT)
ELSA-2023-23648
ELSA-2023-23648: olcne security update (IMPORTANT)
ELSA-2023-12357
ELSA-2023-12357: istio security update (IMPORTANT)
ELSA-2023-12356
ELSA-2023-12356: istio security update (IMPORTANT)
ELSA-2023-12355
ELSA-2023-12355: istio security update (IMPORTANT)
ELSA-2023-12354
ELSA-2023-12354: istio security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | CVE-2023-27491 Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, There is a possibility that non compliant HTTP/1 service may allow malformed requests, potentially leading to a bypass of security policies. This issue is fixed in versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
![]() | CVE-2023-27491 Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, There is a possibility that non compliant HTTP/1 service may allow malformed requests, potentially leading to a bypass of security policies. This issue is fixed in versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9. | CVSS3: 5.4 | 0% Низкий | больше 2 лет назад |
CVE-2023-27491 Envoy is an open source edge and service proxy designed for cloud-nati ... | CVSS3: 5.4 | 0% Низкий | больше 2 лет назад | |
ELSA-2023-23649 ELSA-2023-23649: olcne security update (IMPORTANT) | больше 2 лет назад | |||
ELSA-2023-23648 ELSA-2023-23648: olcne security update (IMPORTANT) | больше 2 лет назад | |||
ELSA-2023-12357 ELSA-2023-12357: istio security update (IMPORTANT) | больше 2 лет назад | |||
ELSA-2023-12356 ELSA-2023-12356: istio security update (IMPORTANT) | больше 2 лет назад | |||
ELSA-2023-12355 ELSA-2023-12355: istio security update (IMPORTANT) | больше 2 лет назад | |||
ELSA-2023-12354 ELSA-2023-12354: istio security update (IMPORTANT) | больше 2 лет назад |
Уязвимостей на страницу