VDB
BDU%3A2024-11399
BDU%3A2024-11399
PUBLISHED
CVSS 7.5 HIGH
Уязвимость конфигурации envoy.load_shed_points.http1_server_abort_dispatch прокси-сервера Envoy, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| envoyproxy | envoy | >= 1.32.0, < 1.32.3, >= 1.31.0, < 1.31.5, >= 1.30.0, < 1.30.9 |
| Сообщество свободного программного обеспечения | Envoy |
Timeline
- Dec 18, 2024 CVE Published
- Dec 18, 2024 PoC Published
- Dec 18, 2024 PoC Published
- Dec 23, 2024 CVE Updated
- Sep 15, 2025 PoC Published
- Sep 16, 2025 PoC Published
References
- https://vuldb.com/?id.288886 url
- https://github.com/envoyproxy/envoy/pull/37743/commits/6cf8afda956ba67c9afad185b962325a5242ef02 advisory
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-q9qv-8j52-77p3 url
- https://github.com/envoyproxy/envoy/releases/tag/v1.32.3 advisory
- https://github.com/envoyproxy/envoy/releases/tag/v1.31.5 advisory
- https://github.com/envoyproxy/envoy/releases/tag/v1.30.9 advisory
- https://github.com/envoyproxy/envoy/releases/tag/v1.29.12 advisory