VDB
BDU%3A2024-11398
BDU%3A2024-11398
PUBLISHED
CVSS 7.099999904632568 HIGH
Уязвимость конфигурации envoy.reloadable_features.http1_balsa_delay_reset прокси-сервера Envoy, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения | Envoy | |
| envoyproxy | envoy | >= 1.31.0, < 1.31.5, >= 1.32.0, < 1.32.3 |
Timeline
- Dec 18, 2024 CVE Published
- Dec 18, 2024 PoC Published
- Dec 18, 2024 PoC Published
- Dec 23, 2024 CVE Updated
References
- https://vuldb.com/ru/?id.288887 url
- https://github.com/envoyproxy/envoy/commit/da56f6da63079baecef9183436ee5f4141a59af8 advisory
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-rmm5-h2wv-mg4f url
- https://github.com/envoyproxy/envoy/releases/tag/v1.32.3 advisory
- https://github.com/envoyproxy/envoy/releases/tag/v1.31.5 advisory