Envoy articles | Pomerium

Topic archive

Resources Categorized: Envoy

It’s always DNS part ∞: tracking down a use-after-free bug in Envoy’s DNS Resolver

Dec 12, 2025blog posts

It’s always DNS part ∞: tracking down a use-after-free bug in Envoy’s DNS Resolver

We found a use-after-free bug in Envoy’s DNS resolver, c-ares (CVE-2025-62408, CVE-2025-67514).

Bobby DeSimone Envoy Infrastructure Open Source

Get a Personalized Demo

Schedule a Call with a Pomerium Engineer