CVE-2020-35470

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter (not HTTP filters).

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/envoyproxy/envoy/compare/v1.16.0...v1.16.1Patch, Third Party Advisory
https://github.com/envoyproxy/envoy/issues/14087Patch, Third Party Advisory
https://github.com/envoyproxy/envoy/pull/14131Patch, Third Party Advisory
https://github.com/envoyproxy/envoy/compare/v1.16.0...v1.16.1Patch, Third Party Advisory
https://github.com/envoyproxy/envoy/issues/14087Patch, Third Party Advisory
https://github.com/envoyproxy/envoy/pull/14131Patch, Third Party Advisory

Timeline

Published: Dec 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-354717.5Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 15 CVE-2020-354734.3An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.CVE-2020-354746.1In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentcha CVE-2020-354757.5In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a us CVE-2020-354769.8A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is wr CVE-2020-354775.3MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLangu CVE-2020-354786.1MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tag CVE-2020-354796.1MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For e CVE-2020-35487.5A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for Cisco Email Security A CVE-2020-354805.3An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been expl CVE-2020-354819.8SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection.CVE-2020-354825.4SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS.