PT-2022-11914 · Envoy · Envoy

Mattklein123 · Published 2022-02-22 · Updated 2024-03-06 · CVE-2021-43825

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Envoy (affected versions not specified)

Description The issue arises when Envoy, an open source edge and service proxy, fails to correctly abort the operation when the buffer overflows while a response is being processed by the filter chain. This can result in accessing a freed memory block, causing Envoy to crash and leading to a denial of service. Envoy is designed to track the amount of buffered request and response data and abort the request if the amount of buffered data exceeds the limit by sending 413 or 500 responses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BIT-ENVOY-2021-43825

CVE-2021-43825

GHSA-H69P-G6XG-MHHH

RHSA-2022:1275

RHSA-2022:1276

Affected Products

Envoy

References · 6

• https://github.com/envoyproxy/envoy/commit/148de954ed3585d8b4298b424aa24916d0de6136 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-43825 · Security Note
• https://osv.dev/vulnerability/CVE-2021-43825 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-envoy-2021-43825 · Vendor Advisory
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-h69p-g6xg-mhhh · Note
• https://t.me/cibsecurity/37916 · Telegram Post