What’s Vulnerable › Vulnerabilities

CVE-2020-35471

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-12-15 · updated 2026-06-17

Description

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500.

Affected products

• envoyproxy envoy: before 1.16.1 — fixed in 1.16.1

How to fix

Upgrade to a fixed version: envoyproxy envoy 1.16.1. Check the vendor advisory for mitigations.

References

• https://github.com/envoyproxy/envoy/compare/v1.16.0...v1.16.1
• https://github.com/envoyproxy/envoy/issues/14113
• https://github.com/envoyproxy/envoy/pull/14122
• https://github.com/envoyproxy/envoy/compare/v1.16.0...v1.16.1
• https://github.com/envoyproxy/envoy/issues/14113
• https://github.com/envoyproxy/envoy/pull/14122

Get alerted when CVE-2020-35471 or the next vulnerability affects your stack