Envoy is a cloud-native, open source edge and service proxy. Envoyproxy with a Brotli filter can get into an endless loop during decompression of Brotli data with extra input.
References
| Link | Resource |
|---|---|
| https://github.com/envoyproxy/envoy/security/advisories/GHSA-7wp5-c2vq-4f8m | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Jun 2024, 14:24
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:* | |
| References | () https://github.com/envoyproxy/envoy/security/advisories/GHSA-7wp5-c2vq-4f8m - Exploit, Third Party Advisory | |
| First Time |
Envoyproxy envoy
Envoyproxy |
|
| CWE | CWE-835 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
04 Jun 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-04 21:15
Updated : 2024-06-12 14:24
NVD link : CVE-2024-32976
Mitre link : CVE-2024-32976
JSON object : View
Products Affected
envoyproxy
- envoy
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')