Servers and applications
CVE-2021-32780
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it receives a GOAWAY frame without any streams outstanding. The connection state is transitioned to DRAINING when it receives a SETTING frame with the SETTINGS_MAX_CONCURRENT_STREAMS parameter set to 0.…
- Severity
- High 7.5
- Published
- 24 Aug 2021
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 1.18.4
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
EnvoyServers and applications · cpe:a:envoyproxy:envoy |
|