Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Envoy Proxy Uncontrolled Resource Consumption Vulnerability - CVE-2024-23323 - Vulnerability Database
Envoy Proxy

Envoy Proxy Uncontrolled Resource Consumption Vulnerability - CVE-2024-23323

Medium
Reference: CVE-2024-23323
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-23323
Title: Envoy Proxy Uncontrolled Resource Consumption Vulnerability
Overview:

Envoy is a high-performance edge/middle/service proxy. The regex expression is compiled for every request and can result in high CPU usage and increased request latency when multiple routes are configured with such matchers. This issue has been addressed in released 1.29.1 1.28.1 1.27.3 and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.