BIT-envoy-2025-66220
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/envoy/BIT-envoy-2025-66220.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/BIT-envoy-2025-66220
- Aliases
- Published
- 2025-12-06T11:38:21.122Z
- Modified
- 2025-12-06T12:26:01.868134Z
- Summary
- Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte
- Details
-
Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy’s mTLS certificate matcher for matchtypedsubjectaltnames may incorrectly treat certificates containing an embedded null byte (\0) inside an OTHERNAME SAN value as valid matches.
- Database specific
{ "severity": "High", "cpes": [ "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*" ] }- References
Affected packages
Bitnami / envoy
Package
- Name
- envoy
- Purl
- pkg:bitnami/envoy
Severity
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N CVSS Calculator