CVE-2023-35943: Envoy vulnerable to CORS filter segfault when origin header is removed
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, the CORS filter will segfault and crash Envoy when the origin header is removed and deleted between decodeHeadersand encodeHeaders. Versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12 have a fix for this issue. As a workaround, do not remove the origin header in the Envoy configuration.
Other sources
If origin header is configured to be removed with requestheaderstoremove: origin, CORS filter will segfault and crash Envoy when the origin header is removed and deleted between decodeHeaders and encodeHeaders.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-35943?
CVE-2023-35943 is a vulnerability in Envoy proxy prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12 that can cause a crash when the `origin` header is removed between `decodeHeaders` and `encodeHeaders`.
What is the severity of CVE-2023-35943?
CVE-2023-35943 has a severity rating of high with a score of 7.5.
How does CVE-2023-35943 affect Envoy proxy?
CVE-2023-35943 affects Envoy proxy versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12.
How can I mitigate the CVE-2023-35943 vulnerability?
To mitigate the CVE-2023-35943 vulnerability, users should update to a version of Envoy proxy that is not affected by the vulnerability.
Where can I find more information about CVE-2023-35943?
You can find more information about CVE-2023-35943 on the official Envoyproxy Envoy GitHub security advisories page and the Red Hat security advisories page.