CVE-2022-29227

Envoy is a cloud-native high-performance edge/middle/service proxy. In versions prior to 1.22.1 if Envoy attempts to send an internal redirect of an HTTP request consisting of more than HTTP headers, there’s a lifetime bug which can be triggered. If while replaying the request Envoy sends a local reply when the redirect headers are processed, the downstream state indicates that the downstream stream is not complete. On sending the local reply, Envoy will attempt to reset the upstream stream, but as it is actually complete, and deleted, this result in a use-after-free. Users are advised to upgrade. Users unable to upgrade are advised to disable internal redirects if crashes are observed.

• CWE-416
• CWE-416

• https://github.com/envoyproxy/envoy/commit/fe7c69c248f4fe5a9080c7ccb35275b5218bb5abPatch, Third Party Advisory
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-rm2p-qvf6-pvr6Third Party Advisory
• https://github.com/envoyproxy/envoy/commit/fe7c69c248f4fe5a9080c7ccb35275b5218bb5abPatch, Third Party Advisory
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-rm2p-qvf6-pvr6Third Party Advisory

Published

Jun 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29221Smarty is a template engine for PHP, facilitating the separa…8.8
• CVE-2022-29222Pion DTLS is a Go implementation of Datagram Transport Layer…7.5
• CVE-2022-29223Azure RTOS USBX is a USB host, device, and on-the-go (OTG) e…9.8
• CVE-2022-29224Envoy is a cloud-native high-performance proxy. Versions of …5.9
• CVE-2022-29225Envoy is a cloud-native high-performance proxy. In versions …7.5
• CVE-2022-29226Envoy is a cloud-native high-performance proxy. In versions …9.1
• CVE-2022-29228Envoy is a cloud-native high-performance proxy. In versions …7.5
• CVE-2022-29229CaSS is a Competency and Skills System. CaSS Library, (npm:c…7.2
• CVE-2022-2923NULL Pointer Dereference in GitHub repository vim/vim prior …5.5
• CVE-2022-29230Hydrogen is a React-based framework for building dynamic, Sh…5.4
• CVE-2022-29232BigBlueButton is an open source web conferencing system. Sta…6.5
• CVE-2022-29233BigBlueButton is an open source web conferencing system. In …4.3