// For flags

CVE-2024-23322

Envoy crashes when idle and request per try timeout occur within the backoff interval

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track
*SSVC
Descriptions

Envoy is a high-performance edge/middle/service proxy. Envoy will crash when certain timeouts happen within the same interval. The crash occurs when the following are true: 1. hedge_on_per_try_timeout is enabled, 2. per_try_idle_timeout is enabled (it can only be done in configuration), 3. per-try-timeout is enabled, either through headers or configuration and its value is equal, or within the backoff interval of the per_try_idle_timeout. This issue has been addressed in released 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Envoy es un proxy de servicio/intermedio/perimetral de alto rendimiento. Envoy se bloqueará cuando se produzcan ciertos tiempos de espera dentro del mismo intervalo. El bloqueo ocurre cuando se cumple lo siguiente: 1. hedge_on_per_try_timeout está habilitado, 2. per_try_idle_timeout está habilitado (solo se puede hacer en la configuración), 3. per-try-timeout está habilitado, ya sea a través de encabezados o configuración y su valor es igual , o dentro del intervalo de espera de per_try_idle_timeout. Este problema se solucionó en las versiones 1.29.1, 1.28.1, 1.27.3 y 1.26.7. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:Track
Exploitation
None
Automatable
No
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2024-01-15 CVE Reserved
  • 2024-02-09 CVE Published
  • 2024-02-15 EPSS Updated
  • 2024-08-01 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-416: Use After Free
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Envoyproxy
Search vendor "Envoyproxy"
 Envoy
Search vendor "Envoyproxy" for product "Envoy"
 >= 1.26.0 < 1.26.7
Search vendor "Envoyproxy" for product "Envoy" and version " >= 1.26.0 < 1.26.7"
-
Affected
Envoyproxy
Search vendor "Envoyproxy"
 Envoy
Search vendor "Envoyproxy" for product "Envoy"
 >= 1.27.0 < 1.27.3
Search vendor "Envoyproxy" for product "Envoy" and version " >= 1.27.0 < 1.27.3"
-
Affected
Envoyproxy
Search vendor "Envoyproxy"
 Envoy
Search vendor "Envoyproxy" for product "Envoy"
 >= 1.28.0 < 1.28.1
Search vendor "Envoyproxy" for product "Envoy" and version " >= 1.28.0 < 1.28.1"
-
Affected
Envoyproxy
Search vendor "Envoyproxy"
 Envoy
Search vendor "Envoyproxy" for product "Envoy"
 >= 1.29.0 < 1.29.1
Search vendor "Envoyproxy" for product "Envoy" and version " >= 1.29.0 < 1.29.1"
-
Affected