CVE-2023-27491
CRITICAL9.1EPSS 0.01%Envoy forwards invalid Http2/Http3 downstream headers
發布日:2024/3/6修改日:2025/10/15
描述
Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, There is a possibility that non compliant HTTP/1 service may allow malformed requests, potentially leading to a bypass of security policies. This issue is fixed in versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9.
受影響套件(1)
- Bitnami/envoyfrom 0, < 1.22.9, >= 1.23.0, < 1.23.6, >= 1.24.0, < 1.24.4, >= 1.25.0, < 1.25.3
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | CRITICAL9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
參考連結(5)
- WEBhttps://datatracker.ietf.org/doc/html/rfc9113#section-8.3
- WEBhttps://datatracker.ietf.org/doc/html/rfc9114#section-4.3.1
- WEBhttps://github.com/envoyproxy/envoy/security/advisories/GHSA-5jmv-cw9p-f9rp
- WEBhttps://nvd.nist.gov/vuln/detail/CVE-2023-27491
- WEBhttps://www.rfc-editor.org/rfc/rfc9110#section-5.6.2