Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2025-66220

Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy’s mTLS certificate matcher for match_typed_subject_alt_names may incorrectly treat certificates containing an embedded null byte (\0) inside an OTHERNAME SAN value as valid matches.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

envoyproxy envoy

  • >= 1.36.0, <= 1.36.2affected
  • >= 1.35.0, <= 1.35.6affected
  • >= 1.34.0, <= 1.34.10affected
  • <= 1.33.12affected

References