Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT request is sent to JWT filter configured with regex match. This provides a denial of service attack vector. The only workaround is to not use regex in the JWT filter. Users are advised to upgrade.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Envoy | Envoyproxy | * | 1.18.6 (excluding) |
| Envoy | Envoyproxy | 1.19.0 (including) | 1.19.3 (excluding) |
| Envoy | Envoyproxy | 1.20.0 (including) | 1.20.2 (excluding) |
| Envoy | Envoyproxy | 1.21.0 (including) | 1.21.1 (excluding) |
| OpenShift Service Mesh 2.0 | RedHat | servicemesh-proxy-0:2.0.9-3.el8 | * |
| OpenShift Service Mesh 2.1 | RedHat | servicemesh-proxy-0:2.1.2-4.el8 | * |