CVE-2024-23322CWE-416

Envoy crashes when idle and request per try timeout occur within the backoff interval

High · published February 9, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

Envoy is a high-performance edge/middle/service proxy. Envoy will crash when certain timeouts happen within the same interval. The crash occurs when the following are true: 1. hedge_on_per_try_timeout is enabled, 2. per_try_idle_timeout is enabled (it can only be done in configuration), 3. per-try-timeout is enabled, either through headers or configuration and its value is equal, or within the backoff interval of the per_try_idle_timeout. This issue has been addressed in released 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00679 · 51.8th percentile
Weakness
CWE-416 · Use After Free
Published
2024-02-09T22:51Z
EPSS history
Timeline
  • 09 FEB 22:51Z
    Envoy crashes when idle and request per try timeout occur within the backoff interval
    cvelistv5