High severity7.5NVD Advisory· Published May 20, 2021· Updated Jun 17, 2026
CVE-2021-28683
CVE-2021-28683
Description
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:envoyproxy:envoy:1.16.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:envoyproxy:envoy:1.16.2:*:*:*:*:*:*:*
- cpe:2.3:a:envoyproxy:envoy:1.17.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- blog.envoyproxy.ionvdVendor Advisory
- github.com/envoyproxy/envoy/releasesnvdThird Party Advisory
- github.com/envoyproxy/envoy/security/advisories/GHSA-r22g-5f3x-xjggnvdNot ApplicableThird Party Advisory
- github.com/envoyproxy/envoy/security/advisories/GHSA-xw4q-6pj2-5gfgnvdThird Party Advisory
News mentions
0No linked articles in our index yet.