BIT-envoy-2024-53270

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/envoy/BIT-envoy-2024-53270.json

JSON Data

https://api.test.osv.dev/v1/vulns/BIT-envoy-2024-53270

Aliases

CVE-2024-53270

Published

2024-12-20T07:08:32.803Z

Modified

2024-12-20T07:58:28.573116Z

Summary

[none]

Details

Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions sendOverloadError is going to assume the active request exists when envoy.load_shed_points.http1_server_abort_dispatch is configured. If active_request is nullptr, only onMessageBeginImpl() is called. However, the onMessageBeginImpl will directly return ok status if the stream is already reset leading to the nullptr reference. The downstream reset can actually happen during the H/2 upstream reset. As a result envoy may crash. This issue has been addressed in releases 1.32.3, 1.31.5, 1.30.9, and 1.29.12. Users are advised to upgrade. Users unable to upgrade may disable http1_server_abort_dispatch load shed point and/or use a high threshold.

Database specific

{
    "cpes": [
        "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*"
    ],
    "severity": "High"
}

References

Affected packages

Bitnami / envoy

Package

Name: envoy
Purl: pkg:bitnami/envoy

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

1.32.0

Fixed

1.32.3

Introduced

1.31.0

Fixed

1.31.5

Introduced

1.30.0

Fixed

1.30.9

Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.29.12