CVE-2024-32974: Envoy affected by a crash in EnvoyQuicServerStream::OnInitialHeadersComplete()
Envoy is a cloud-native, open source edge and service proxy. A crash was observed in EnvoyQuicServerStream::OnInitialHeadersComplete() with following call stack. It is a use-after-free caused by QUICHE continuing push request headers after StopReading() being called on the stream. As after StopReading(), the HCM's ActiveStream might have already be destroyed and any up calls from QUICHE could potentially cause use after free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32974?
CVE-2024-32974 is classified as a high-severity vulnerability due to its potential for causing a crash.
How do I fix CVE-2024-32974?
To fix CVE-2024-32974, upgrade to Envoy Proxy versions higher than 1.27.6 or within specified safe versions.
What components are affected by CVE-2024-32974?
CVE-2024-32974 affects Envoy Proxy versions 1.27.6 and versions between 1.28.0 to 1.28.4, 1.29.0 to 1.29.5, and 1.30.0 to 1.30.2.
What causes the vulnerability CVE-2024-32974?
CVE-2024-32974 is caused by a use-after-free condition in the Envoy QUIC protocol handling.
How does CVE-2024-32974 impact application stability?
CVE-2024-32974 can lead to application instability due to potential crashes when processing QUIC request headers.