CVE-2021-43825

Envoy is an open source edge and service proxy, designed for cloud-native applications. Sending a locally generated response must stop further processing of request or response data. Envoy tracks the amount of buffered request and response data and aborts the request if the amount of buffered data is over the limit by sending 413 or 500 responses. However when the buffer overflows while response is processed by the filter chain the operation may not be aborted correctly and result in accessing a freed memory block. If this happens Envoy will crash resulting in a denial of service.

• CWE-416

• https://github.com/envoyproxy/envoy/commit/148de954ed3585d8b4298b424aa24916d0de6136Patch, Third Party Advisory
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-h69p-g6xg-mhhhIssue Tracking, Third Party Advisory
• https://github.com/envoyproxy/envoy/commit/148de954ed3585d8b4298b424aa24916d0de6136Patch, Third Party Advisory
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-h69p-g6xg-mhhhIssue Tracking, Third Party Advisory

Published

Feb 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4382The Recently plugin for WordPress is vulnerable to arbitrary…8.8
• CVE-2021-43820Seafile is an open source cloud storage system. A sync token…5.9
• CVE-2021-43821Opencast is an Open Source Lecture Capture & Video Managemen…7.7
• CVE-2021-43822Jackalope Doctrine-DBAL is an implementation of the PHP Cont…7.5
• CVE-2021-43823Sourcegraph is a code search and navigation engine. Sourcegr…6.5
• CVE-2021-43824Envoy is an open source edge and service proxy, designed for…7.5
• CVE-2021-43826Envoy is an open source edge and service proxy, designed for…7.5
• CVE-2021-43827discourse-footnote is a library providing footnotes for post…4.3
• CVE-2021-43828PatrOwl is a free and open-source solution for orchestrating…7.5
• CVE-2021-43829PatrOwl is a free and open-source solution for orchestrating…8.8
• CVE-2021-4383The WP Quick FrontEnd Editor plugin for WordPress is vulnera…4.3
• CVE-2021-43830OpenProject is a web-based project management software. Open…8.8