PT-2021-17902

CVE-2021-28682

Published

2021-05-20

Updated

2024-03-06

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.71.1

Description: A remotely exploitable integer overflow issue exists due to a very large grpc-timeout value, leading to unexpected timeout calculations.

Recommendations: For versions prior to 1.71.1, update to a version that contains a fix for this issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-R22G-5F3X-XJGG

BIT-ENVOY-2021-28682

RHSA-2021:1322

RHSA-2021:1324

Found an issue in the description? Have something to add? Feel free to write us 👾