CVE-2021-29258

• BIT-envoy-2021-29258

• GHSA-rqvq-hxw5-776j
• GHSA-xw4q-6pj2-5gfg

• 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

{
    "unresolved_ranges": [
        {
            "vendor_product": "envoyproxy:envoy",
            "extracted_events": [
                {
                    "introduced": "1.14.6"
                },
                {
                    "last_affected": "1.14.6"
                },
                {
                    "introduced": "1.15.3"
                },
                {
                    "last_affected": "1.15.3"
                },
                {
                    "introduced": "1.16.2"
                },
                {
                    "last_affected": "1.16.2"
                },
                {
                    "introduced": "1.17.1"
                },
                {
                    "last_affected": "1.17.1"
                }
            ],
            "cpes": [
                "cpe:2.3:a:envoyproxy:envoy:1.14.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:envoyproxy:envoy:1.15.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:envoyproxy:envoy:1.16.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:envoyproxy:envoy:1.17.1:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING"
        }
    ]
}

• https://blog.envoyproxy.io
• https://github.com/envoyproxy/envoy/releases/tag/v1.14.0
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-rqvq-hxw5-776j
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-xw4q-6pj2-5gfg
• https://github.com/envoyproxy/envoy-setec/pull/230