CVE-2024-23325: Envoy crashes when using an address type that isn’t supported by the OS
First published: Fri Feb 09 2024(Updated: )
Envoy is a high-performance edge/middle/service proxy. Envoy crashes in Proxy protocol when using an address type that isn’t supported by the OS. Envoy is susceptible to crashing on a host with IPv6 disabled and a listener config with proxy protocol enabled when it receives a request where the client presents its IPv6 address. It is valid for a client to present its IPv6 address to a target server even though the whole chain is connected via IPv4. This issue has been addressed in released 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Envoy Proxy | >=1.26.0<1.26.7 | |
| Envoy Proxy | >=1.27.0<1.27.3 | |
| Envoy Proxy | >=1.28.0<1.28.1 | |
| Envoy Proxy | >=1.29.0<1.29.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-23325?
CVE-2024-23325 has been classified as a high severity vulnerability due to its potential to crash Envoy under specific configurations.
How do I fix CVE-2024-23325?
To fix CVE-2024-23325, you should update Envoy to a version above 1.29.1, 1.28.1, 1.27.3, or 1.26.7, as appropriate for your current version.
What versions of Envoy are affected by CVE-2024-23325?
CVE-2024-23325 affects Envoy versions from 1.26.0 to 1.26.7, 1.27.0 to 1.27.3, 1.28.0 to 1.28.1, and 1.29.0 to 1.29.1.
What specific conditions trigger CVE-2024-23325?
CVE-2024-23325 is triggered when Envoy receives a proxy protocol request while IPv6 is disabled on the host, leading to a crash.
Is there a workaround for CVE-2024-23325?
Currently, disabling the proxy protocol or enabling IPv6 on the host can serve as a temporary workaround for CVE-2024-23325.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/severity
- agent/author
- agent/event
- agent/remedy
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/envoyproxy
- canonical/envoy proxy
- version/envoy proxy/1.26.0
- version/envoy proxy/1.27.0
- version/envoy proxy/1.28.0
- version/envoy proxy/1.29.0