CVE-2020-35470

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol…

published December 15, 2020

CVSS
—
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter (not HTTP filters).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00986 · 62.1th percentile
Published
2020-12-15T00:48Z
EPSS history
Timeline
  • 15 DEC 00:48Z
    Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol…
    cvelistv5