CVE-2020-35470

8.8

HIGHCVSS v3

Published

December 15, 2020

CVSS v2

5.8 MEDIUM

Affected

9 projects

Assigned by

MITRE

Severity scale

010

Description

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter (not HTTP filters).

envoyproxy/envoy

GitHubCloud-native high-performance edge/middle/service proxy

< 1.16.1NVD

istio/envoy

GitHubFork of Envoy used for testing and tinkering as part of the Istio dev process

< 1.16.1NVD

envoy

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Simple API for running external processes.

< 1.16.1NVD

Envoy

NuGet GalleryWith the mediator pattern, communication between objects is encapsulated within a mediator object. Objects no longer communicate directly with each other, but instead communicate through the mediator. This reduces the dependencies between communicating objects, thereby reducing coupling.

< 1.16.1NVD