BIT-envoy-2024-30255

Risk Scores

Affected Products

Exploit Intelligence

• CVE-2024-30255 This repository contains a proof-of-concept (PoC) Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. (github-poc)
• index.html (github-poc)

Timeline

• Apr 6, 2024 CVE Published
• Nov 6, 2025 CVE Updated

References

• https://github.com/envoyproxy/envoy/security/advisories/GHSA-j654-3ccm-vfmm url
• http://www.openwall.com/lists/oss-security/2024/04/03/16 url
• http://www.openwall.com/lists/oss-security/2024/04/05/3 url
• https://nvd.nist.gov/vuln/detail/CVE-2024-30255 url
• https://www.kb.cert.org/vuls/id/421644 url