Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Envoy Proxy Use After Free Vulnerability - CVE-2024-34362 - Vulnerability Database
Envoy Proxy

Envoy Proxy Use After Free Vulnerability - CVE-2024-34362

Medium
Reference: CVE-2024-34362
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-34362
Title: Envoy Proxy Use After Free Vulnerability
Overview:

Envoy is a cloud-native open source edge and service proxy. There is a use-after-free in HttpConnectionManager (HCM) with EnvoyQuicServerStream that can crash Envoy. An attacker can exploit this vulnerability by sending a request without FIN then a RESET_STREAM frame and then after receiving the response closing the connection.