An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Envoy | Envoyproxy | 1.16.2 (including) | 1.16.2 (including) |
| Envoy | Envoyproxy | 1.17.1 (including) | 1.17.1 (including) |
| OpenShift Service Mesh 1.1 | RedHat | servicemesh-proxy-0:1.1.13-1.el8 | * |
| OpenShift Service Mesh 2.0 | RedHat | servicemesh-proxy-0:2.0.3-1.el8 | * |