CVE-2024-53269

Published Dec 18, 2024

Last updated 2 months ago

CVSS medium 4.5

Overview

Description
Envoy is a cloud-native high-performance edge/middle/service proxy. When additional address are not ip addresses, then the Happy Eyeballs sorting algorithm will crash in data plane. This issue has been addressed in releases 1.32.2, 1.31.4, and 1.30.8. Users are advised to upgrade. Users unable to upgrade may disable Happy Eyeballs and/or change the IP configuration.
Source
security-advisories@github.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
4.5
Impact score
3.6
Exploitability score
0.9
Vector string
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Severity
MEDIUM

Weaknesses

security-advisories@github.com
CWE-670

Social media

Hype score
Not currently trending

  1. CVE-2024-53269 Happy Eyeballs Crash in Envoy Proxy Address Sorting Algorithm Envoy is a cloud-based proxy that works at the edge, in the middle, or as a service. If extra addresses are not IP addresses, the Happy... https://t.co/xOQbPegQz2

    @VulmonFeeds

    19 Dec 2024

    3 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References