Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-3k2s-ndb3-6feq
Summaryenvoy: Incorrect handling of HTTP requests and responses with mixed case schemes
Aliases
0
alias CVE-2023-35944
Fixed_packages
Affected_packages
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-35944.json
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-35944.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-35944
reference_id
reference_type
scores
0
value 9e-05
scoring_system epss
scoring_elements 0.00896
published_at 2026-06-05T12:55:00Z
1
value 9e-05
scoring_system epss
scoring_elements 0.00891
published_at 2026-06-08T12:55:00Z
2
value 9e-05
scoring_system epss
scoring_elements 0.00892
published_at 2026-06-09T12:55:00Z
3
value 9e-05
scoring_system epss
scoring_elements 0.00895
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-35944
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2217985
reference_id 2217985
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2217985
3
reference_url https://github.com/envoyproxy/envoy/security/advisories/GHSA-pvgm-7jpg-pw5g
reference_id GHSA-pvgm-7jpg-pw5g
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-23T20:18:05Z/
url https://github.com/envoyproxy/envoy/security/advisories/GHSA-pvgm-7jpg-pw5g
4
reference_url https://access.redhat.com/errata/RHSA-2023:4624
reference_id RHSA-2023:4624
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4624
5
reference_url https://access.redhat.com/errata/RHSA-2023:4625
reference_id RHSA-2023:4625
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4625
6
reference_url https://access.redhat.com/errata/RHSA-2023:5175
reference_id RHSA-2023:5175
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5175
Weaknesses
0
cwe_id 178
name Improper Handling of Case Sensitivity
description The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.
1
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Exploits
Severity_range_score8.2 - 8.2
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-3k2s-ndb3-6feq