UpHeron
All vulnerabilities

Servers and applications

CVE-2021-43825

Envoy is an open source edge and service proxy, designed for cloud-native applications. Sending a locally generated response must stop further processing of request or response data. Envoy tracks the amount of buffered request and response data and aborts the request if the amount of buffered data is over the limit by sending 413 or 500 responses. However when the buffer overflows while response…

Severity
High 7.5
Published
22 Feb 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.18.6, 1.19.3, 1.20.2, 1.21.1
Sources
NVD

Affected software

SoftwareAffected versions
EnvoyServers and applications · cpe:a:envoyproxy:envoy
  • Every version before 1.18.6
  • From 1.19.0 before 1.19.3
  • From 1.20.0 before 1.20.2
  • From 1.21.0 before 1.21.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-43825
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-43825