CVE-2024-23327

Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfault when attempting to craft the upstream PPv2 header. This occurs when the downstream request has a command type of LOCAL and does not have the protocol block. This issue has been addressed in releases 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*
cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*
cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*
cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*

History

15 Feb 2024, 04:45

Type Values Removed Values Added
First Time Envoyproxy
Envoyproxy envoy
CPE cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*
Summary
  • (es) Envoy es un proxy de servicio/intermedio/perimetral de alto rendimiento. Cuando PPv2 está habilitado tanto en un oyente como en un clúster posterior, la instancia de Envoy generará un error de segmentación al intentar crear el encabezado PPv2 ascendente. Esto ocurre cuando la solicitud descendente tiene un tipo de comando LOCAL y no tiene el bloque de protocolo. Este problema se solucionó en las versiones 1.29.1, 1.28.1, 1.27.3 y 1.26.7. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad.
References () https://github.com/envoyproxy/envoy/commit/63895ea8e3cca9c5d3ab4c5c128ed1369969d54a - () https://github.com/envoyproxy/envoy/commit/63895ea8e3cca9c5d3ab4c5c128ed1369969d54a - Patch, Third Party Advisory
References () https://github.com/envoyproxy/envoy/security/advisories/GHSA-4h5x-x9vh-m29j - () https://github.com/envoyproxy/envoy/security/advisories/GHSA-4h5x-x9vh-m29j - Third Party Advisory

09 Feb 2024, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-09 23:15

Updated : 2024-02-15 04:45


NVD link : CVE-2024-23327

Mitre link : CVE-2024-23327

CVE.ORG link : CVE-2024-23327


JSON object : View

Products Affected

envoyproxy

  • envoy
CWE
CWE-476

NULL Pointer Dereference