PT-2022-19479 · Envoy · Envoy

Raul Gutierrez Segales + 1 · Published 2022-06-09 · Updated 2024-03-06 · CVE-2022-29228

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.22.1

Description The issue arises when the OAuth filter attempts to invoke remaining filters in the chain after a local response has been emitted. This can trigger an ASSERT() in newer versions and corrupt memory in earlier versions. The continueDecoding() function should not be called from filters after a local reply has been sent. There are no known workarounds for this issue.

Recommendations For versions prior to 1.22.1, users are advised to upgrade to version 1.22.1 or later to resolve the issue. As a temporary workaround, consider disabling the OAuth filter until a patch is available. Restrict access to the affected continueDecoding() function to minimize the risk of exploitation.

Exploit

Fix

Use After Free

Assertion Failure

Weakness Enumeration

CWE-416

CWE-617

Related Identifiers

BIT-ENVOY-2022-29228

CVE-2022-29228

GHSA-RWW6-8H7G-8JF6

RHSA-2022:5004

Affected Products

Envoy

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29228.json · Exploit
• https://github.com/envoyproxy/envoy/commit/7ffda4e809dec74449ebc330cebb9d2f4ab61360 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-29228 · Security Note
• https://linux.oracle.com/errata/ELSA-2022-9586.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9588.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9587.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9589.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-29228 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-envoy-2022-29228 · Vendor Advisory
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-rww6-8h7g-8jf6 · Note
• https://t.me/cibsecurity/44147 · Telegram Post