CVE-2021-39162
Incorrect handling of H2 GOAWAY + SETTINGS frames
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, can abnormally terminate if an H/2 GOAWAY and SETTINGS frame are received in the same IO event. This can lead to a DoS in the presence of untrusted *upstream* servers. 0.15.1 contains an upgraded envoy binary with this vulnerability patched. If only trusted upstreams are configured, there is not substantial risk of this condition being triggered.
Pomerium es un proxy de acceso de código abierto consciente de la identidad. Envoy, en el que es basado Pomerium, puede terminar anormalmente si se recibe una trama H/2 GOAWAY y SETTINGS en el mismo evento IO. Esto puede conllevar a un DoS en presencia de servidores *upstream* no confiables. La versión 0.15.1 contiene un binario envoy actualizado con esta vulnerabilidad parcheada. Si sólo se configuran upstreams confiables, no se presenta un riesgo sustancial de que se desencadene esta condición
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-08-16 CVE Reserved
- 2021-09-09 CVE Published
- 2024-05-25 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-754: Improper Check for Unusual or Exceptional Conditions
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
https://github.com/envoyproxy/envoy/security/advisories/GHSA-j374-mjrw-vvp8 | Third Party Advisory | |
https://github.com/pomerium/pomerium/security/advisories/GHSA-gjcg-vrxg-xmgv | Third Party Advisory | |
https://groups.google.com/g/envoy-announce/c/5xBpsEZZDfE/m/wD05NZBbAgAJ | Not Applicable |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Envoyproxy Search vendor "Envoyproxy" | Envoy Search vendor "Envoyproxy" for product "Envoy" | < 1.18.4 Search vendor "Envoyproxy" for product "Envoy" and version " < 1.18.4" | - |
Affected
| ||||||
Envoyproxy Search vendor "Envoyproxy" | Envoy Search vendor "Envoyproxy" for product "Envoy" | 1.19.0 Search vendor "Envoyproxy" for product "Envoy" and version "1.19.0" | - |
Affected
| ||||||
Pomerium Search vendor "Pomerium" | Pomerium Search vendor "Pomerium" for product "Pomerium" | 0.15.0 Search vendor "Pomerium" for product "Pomerium" and version "0.15.0" | - |
Affected
|