CVE-2021-28683 - log back

CVE-2021-28683 edited at 12 May 2021 07:39:52
Severity
- Unknown
+ High
Remote
- Unknown
+ Remote
Type
- Unknown
+ Denial of service
Description
+ Envoy before version 1.18.0, and subsequently Istio before version 1.9.3, contains a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.
References
+ https://istio.io/latest/news/security/istio-security-2021-003/
+ https://github.com/envoyproxy/envoy/commit/35783a5559f5e883533fdbe7b913dd63d4dc772e
CVE-2021-28683 created at 12 May 2021 07:32:15
Severity
+ Unknown
Remote
+ Unknown
Type
+ Unknown
Description
References
Notes