CVE-2020-35471

7.5

HIGHCVSS v3

Published

December 15, 2020

CVSS v2

5 MEDIUM

Affected

9 projects

Assigned by

MITRE

Severity scale

010

Description

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500.

envoyproxy/envoy

GitHubCloud-native high-performance edge/middle/service proxy

< 1.16.1NVD

istio/envoy

GitHubFork of Envoy used for testing and tinkering as part of the Istio dev process

< 1.16.1NVD

envoy

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Simple API for running external processes.

< 1.16.1NVD

Envoy

NuGet GalleryWith the mediator pattern, communication between objects is encapsulated within a mediator object. Objects no longer communicate directly with each other, but instead communicate through the mediator. This reduces the dependencies between communicating objects, thereby reducing coupling.

< 1.16.1NVD