High severity7.5NVD Advisory· Published May 20, 2021· Updated Jun 17, 2026
CVE-2021-28682
CVE-2021-28682
Description
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large grpc-timeout value leads to unexpected timeout calculations.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- Envoy/Envoydescription
cpe:2.3:a:envoyproxy:envoy:1.14.6:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:envoyproxy:envoy:1.14.6:*:*:*:*:*:*:*
- cpe:2.3:a:envoyproxy:envoy:1.15.3:*:*:*:*:*:*:*
- cpe:2.3:a:envoyproxy:envoy:1.16.2:*:*:*:*:*:*:*
- cpe:2.3:a:envoyproxy:envoy:1.17.1:*:*:*:*:*:*:*
- (no CPE)range: <=1.71.1
Patches
Vulnerability mechanics
References
4- github.com/envoyproxy/envoy/blob/15e3b9dbcc9aaa9d391fa8033904aad1ea1ae70d/api/envoy/api/v2/cluster.protonvdExploitThird Party Advisory
- blog.envoyproxy.ionvdVendor Advisory
- github.com/envoyproxy/envoy/releasesnvdThird Party Advisory
- github.com/envoyproxy/envoy/security/advisories/GHSA-r22g-5f3x-xjggnvdThird Party Advisory
News mentions
0No linked articles in our index yet.