REDHAT-BUG-2333091: Null Pointer Dereference
First published: Wed Dec 18 2024(Updated: )
Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions `sendOverloadError` is going to assume the active request exists when `envoy.load_shed_points.http1_server_abort_dispatch` is configured. If `active_request` is nullptr, only onMessageBeginImpl() is called. However, the `onMessageBeginImpl` will directly return ok status if the stream is already reset leading to the nullptr reference. The downstream reset can actually happen during the H/2 upstream reset. As a result envoy may crash. This issue has been addressed in releases 1.32.3, 1.31.5, 1.30.9, and 1.29.12. Users are advised to upgrade. Users unable to upgrade may disable `http1_server_abort_dispatch` load shed point and/or use a high threshold.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Envoy Proxy | <1.29.12 | |
| Envoy Proxy | >=1.29.12<1.32.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-2333091?
The severity of REDHAT-BUG-2333091 is considered high due to the potential for active request handling issues.
How do I fix REDHAT-BUG-2333091?
To fix REDHAT-BUG-2333091, you should upgrade Envoy to a version higher than 1.32.3.
Which versions of Envoy are affected by REDHAT-BUG-2333091?
Envoy versions from 1.29.12 up to, but not including, 1.32.3 are affected by REDHAT-BUG-2333091.
What components are primarily impacted by REDHAT-BUG-2333091?
The primary component impacted by REDHAT-BUG-2333091 is the sendOverloadError function within the Envoy Proxy.
What is the nature of the issue described in REDHAT-BUG-2333091?
The issue described in REDHAT-BUG-2333091 involves a flaw in request handling when the load shed points are misconfigured.
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-53270
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/source
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/envoy
- canonical/envoy proxy