PT-2023-21167 · Envoy · Envoy

Cancecen + 1 · Publicado 2023-04-04 · Atualizado 2024-03-06 · CVE-2023-27491

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.26.0 Envoy versions prior to 1.25.3 Envoy versions prior to 1.24.4 Envoy versions prior to 1.23.6 Envoy versions prior to 1.22.9

Description Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior to the fixed versions, there is a possibility that non-compliant HTTP/1 service may allow malformed requests, potentially leading to a bypass of security policies.

Recommendations For versions prior to 1.26.0, update to version 1.26.0 or later. For versions prior to 1.25.3, update to version 1.25.3 or later. For versions prior to 1.24.4, update to version 1.24.4 or later. For versions prior to 1.23.6, update to version 1.23.6 or later. For versions prior to 1.22.9, update to version 1.22.9 or later.

Exploit

Correção

HTTP Request/Response Smuggling

RCE

Enumeração de Fraquezas

CWE-444

CWE-20

Identificadores relacionados

BIT-ENVOY-2023-27491

CVE-2023-27491

GHSA-5JMV-CW9P-F9RP

Produtos afetados

Envoy

Referências · 16

• 🔥 https://github.com/envoyproxy/envoy/security/advisories/GHSA-5jmv-cw9p-f9rp · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/27xxx/CVE-2023-27491.json · Exploit
• https://linux.oracle.com/errata/ELSA-2023-12355.html · Aviso do Fabricante
• https://rfc-editor.org/rfc/rfc9110#section-5.6.2 · Nota
• https://t.me/cibsecurity/61418 · Publicação no Telegram
• https://datatracker.ietf.org/doc/html/rfc9113#section-8.3 · Nota
• https://linux.oracle.com/errata/ELSA-2023-12357.html · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2023-12354.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-27491 · Aviso do Fabricante
• https://t.me/cvenotify/47520 · Publicação no Telegram
• https://osv.dev/vulnerability/BIT-envoy-2023-27491 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-27491 · Nota de Segurança
• https://datatracker.ietf.org/doc/html/rfc9114#section-4.3.1 · Nota
• https://linux.oracle.com/errata/ELSA-2023-12356.html · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2023-23649.html · Aviso do Fabricante