What is the vulnerability ID for this Envoy vulnerability?

The vulnerability ID for this Envoy vulnerability is CVE-2022-29227.

What is the affected software for this vulnerability?

The affected software for this vulnerability is Envoy versions prior to 1.22.1.

What is the severity of CVE-2022-29227?

The severity of CVE-2022-29227 is high with a CVSS score of 7.5.

Are there any references for this vulnerability?

Yes, you can find references for this vulnerability at the following links: [GitHub Commit](https://github.com/envoyproxy/envoy/commit/fe7c69c248f4fe5a9080c7ccb35275b5218bb5ab) and [GitHub Security Advisory](https://github.com/envoyproxy/envoy/security/advisories/GHSA-rm2p-qvf6-pvr6).

Vulnerability/
CVE-2022-29227

high

7.5

CWE

416

9/6/2022

16/6/2022

CVE-2022-29227: Use After Free

Q: How can this vulnerability be triggered?

This vulnerability can be triggered if Envoy attempts to send an internal redirect of an HTTP request consisting of more than HTTP headers.

First published: Thu Jun 09 2022(Updated: )

Envoy is a cloud-native high-performance edge/middle/service proxy. In versions prior to 1.22.1 if Envoy attempts to send an internal redirect of an HTTP request consisting of more than HTTP headers, thereâ€™s a lifetime bug which can be triggered. If while replaying the request Envoy sends a local reply when the redirect headers are processed, the downstream state indicates that the downstream stream is not complete. On sending the local reply, Envoy will attempt to reset the upstream stream, but as it is actually complete, and deleted, this result in a use-after-free. Users are advised to upgrade. Users unable to upgrade are advised to disable internal redirects if crashes are observed.

Credit: security-advisories@github.com

Affected Software	Affected Version	How to fix
Envoyproxy Envoy	<1.22.1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the vulnerability ID for this Envoy vulnerability?
The vulnerability ID for this Envoy vulnerability is CVE-2022-29227.
What is the affected software for this vulnerability?
The affected software for this vulnerability is Envoy versions prior to 1.22.1.
What is the severity of CVE-2022-29227?
The severity of CVE-2022-29227 is high with a CVSS score of 7.5.
How can this vulnerability be triggered?
This vulnerability can be triggered if Envoy attempts to send an internal redirect of an HTTP request consisting of more than HTTP headers.
Are there any references for this vulnerability?
Yes, you can find references for this vulnerability at the following links: [GitHub Commit](https://github.com/envoyproxy/envoy/commit/fe7c69c248f4fe5a9080c7ccb35275b5218bb5ab) and [GitHub Security Advisory](https://github.com/envoyproxy/envoy/security/advisories/GHSA-rm2p-qvf6-pvr6).

collector/nvd-index
agent/severity
agent/references
agent/weakness
agent/author
agent/tags
agent/event
agent/type
agent/description
agent/remedy
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
vendor/envoyproxy
canonical/envoyproxy envoy

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.