trong>:
Envoy contains a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.<ul><li><strong>CVSS Score</strong>: 7.5 <a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H&version=3.1">AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></li></ul></li><li><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28682">CVE-2021-28682</a></strong>:
Envoy contains a remotely exploitable integer overflow 