https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:11:09 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04157 bdu:2022-04157 https://cve.radiocsirt.org/vuln/bdu:2022-04157 https://cve.radiocsirt.org/vuln/bit-envoy-2022-29225 <p><strong>Affected:</strong> Bitnami: envoy</p> <p>Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in the decode/encodeBody. This may allow an attacker to zip bomb the decompressor by sending a small highly compressed payload. Maliciously constructed zip files may exhaust system memory and cause a denial of service. Users are advised to upgrade. Users unable to upgrade may consider disabling decompression.</p> <p><strong>Affected:</strong> Bitnami: envoy</p> <p>Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in the decode/encodeBody. This may allow an attacker to zip bomb the decompressor by sending a small highly compressed payload. Maliciously constructed zip files may exhaust system memory and cause a denial of service. Users are advised to upgrade. Users unable to upgrade may consider disabling decompression.</p> https://cve.radiocsirt.org/vuln/bit-envoy-2022-29225 https://cve.radiocsirt.org/vuln/certfr-2022-avi-543 certfr-2022-avi-543 https://cve.radiocsirt.org/vuln/certfr-2022-avi-543 https://cve.radiocsirt.org/vuln/cnvd-2022-82665 cnvd-2022-82665 https://cve.radiocsirt.org/vuln/cnvd-2022-82665 https://cve.radiocsirt.org/vuln/euvd-2026-232697 EUVD-2026-232697 https://cve.radiocsirt.org/vuln/euvd-2026-232697 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29225 <p>Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in the decode/encodeBody. This may allow an attacker to zip bomb the decompressor by sending a small highly compressed payload. Maliciously constructed zip files may exhaust system memory and cause a denial of service. Users are advised to upgrade. Users unable to upgrade may consider disabling decompression.</p> <p>Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in the decode/encodeBody. This may allow an attacker to zip bomb the decompressor by sending a small highly compressed payload. Maliciously constructed zip files may exhaust system memory and cause a denial of service. Users are advised to upgrade. Users unable to upgrade may consider disabling decompression.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-29225 https://cve.radiocsirt.org/vuln/gsd-2022-29225 gsd-2022-29225 https://cve.radiocsirt.org/vuln/gsd-2022-29225 https://cve.radiocsirt.org/vuln/rhsa-2022:5003 <p>envoy: Segfault in GrpcHealthCheckerImpl envoy: Decompressors can be zip bombed</p> <p>envoy: Segfault in GrpcHealthCheckerImpl envoy: Decompressors can be zip bombed</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5003 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0288 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen, einen nicht näher spezifizierten Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen, einen nicht näher spezifizierten Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0288