CVE-2024-23326

描述

Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists through Envoy if a server can be tricked into adding an upgrade header into a response. Per RFC https://www.rfc-editor.org/rfc/rfc7230#section-6.7 a server sends 101 when switching protocols. Envoy incorrectly accepts a 200 response from a server when requesting a protocol upgrade, but 200 does not indicate protocol switch. This opens up the possibility of request smuggling through Envoy if the server can be tricked into adding the upgrade header to the response.

如何修補 CVE-2024-23326

要修補 CVE-2024-23326,請將受影響套件升級到下列已修補版本。

• —升級至 1.27.6 或更新版本

CVE-2024-23326 正在被利用嗎?

低 — EPSS 為 0.4%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 1.27.6, >= 1.28.0, < 1.28.4, >= 1.29.0, < 1.29.5, >= 1.30.0, < 1.30.2

CVSS 分數

參考連結(2)

• WEBgithub.com/envoyproxy/envoy/security/advisories/GHSA-vcf8-7238-v74c
• WEBnvd.nist.gov/vuln/detail/CVE-2024-23326