Envoy is a cloud-native, open source edge and service proxy. There is a crash at `QuicheDataReader::PeekVarInt62Length()`. It is caused by integer underflow in the `QuicStreamSequencerBuffer::PeekRegion()` implementation.
References
| Link | Resource |
|---|---|
| https://github.com/envoyproxy/envoy/security/advisories/GHSA-g9mq-6v96-cpqc | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Jun 2024, 15:12
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Envoyproxy envoy
Envoyproxy |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-191 | |
| CPE | cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:* | |
| References | () https://github.com/envoyproxy/envoy/security/advisories/GHSA-g9mq-6v96-cpqc - Exploit, Third Party Advisory |
04 Jun 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-04 21:15
Updated : 2024-06-12 15:12
NVD link : CVE-2024-32975
Mitre link : CVE-2024-32975
JSON object : View
Products Affected
envoyproxy
- envoy
CWE
CWE-191
Integer Underflow (Wrap or Wraparound)