Vulnerabilities > CVE-2024-32976 - Infinite Loop vulnerability in Envoyproxy Envoy

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
envoyproxy
CWE-835
NVD
Published: 2024-06-04
Updated: 2024-06-12

Summary

Envoy is a cloud-native, open source edge and service proxy. Envoyproxy with a Brotli filter can get into an endless loop during decompression of Brotli data with extra input.

Vulnerable Configurations

Part Description Count
Application
Envoyproxy
94

Common Weakness Enumeration (CWE)

References