VDB
BDU%3A2024-11397
BDU%3A2024-11397
PUBLISHED
CVSS 4.5 MEDIUM
Уязвимость алгоритма сортировки Happy Eyeballs прокси-сервера Envoy, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
4.5
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| envoyproxy | envoy | >= 1.32.0, < 1.32.2, >= 1.31.0, < 1.31.4, >= 1.30.0, < 1.30.8 |
| Сообщество свободного программного обеспечения | Envoy |
Timeline
- Dec 18, 2024 CVE Published
- Dec 18, 2024 PoC Published
- Dec 18, 2024 PoC Published
- Aug 13, 2025 CVE Updated
References
- https://vuldb.com/?id.288885 url
- https://github.com/envoyproxy/envoy/pull/37743/commits/3f62168d86aceb90f743f63b50cc711710b1c401 advisory
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-mfqp-7mmj-rm53 url
- https://github.com/envoyproxy/envoy/releases/tag/v1.32.3 advisory
- https://github.com/envoyproxy/envoy/releases/tag/v1.31.5 advisory
- https://github.com/envoyproxy/envoy/releases/tag/v1.30.9 advisory