Login
Log in using an SSO provider:
Fedora Account System
Red Hat Associate
Login using a Red Hat Bugzilla account
Forgot Password
Create an Account
Red Hat Bugzilla – Bug 2259233
Home
New
Search
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh94 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
[?]
This site requires JavaScript to be enabled to function correctly, please enable it.
Bug 2259233
(
CVE-2024-23322
) -
CVE-2024-23322
envoy: Envoy crashes when idle and request per try timeout occur within the backoff interval
Summary:
CVE-2024-23322 envoy: Envoy crashes when idle and request per try timeout occ...
Keywords
:
Security
Status
:
NEW
Alias:
CVE-2024-23322
Product:
Security Response
Classification:
Other
Component:
vulnerability
Sub Component:
---
Version:
unspecified
Hardware:
All
OS:
Linux
Priority:
medium
Severity:
medium
Target Milestone:
---
Assignee:
Product Security
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
2259221
TreeView+
depends on
/
blocked
Reported:
2024-01-19 16:26 UTC by
Patrick Del Bello
Modified:
2024-03-13 09:14 UTC (
History
)
CC List:
4 users
(
show
)
jwendell
rcernich
security-response-team
twalsh
Fixed In Version:
envoy proxy 1.29.1, envoy proxy 1.28.1, envoy proxy 1.27.3, envoy proxy 1.26.7
Doc Type:
If docs needed, set a value
Doc Text:
A flaw was found in the Envoy proxy. Envoy will crash when certain timeouts happen within the same interval. The crash occurs when hedge_on_per_try_timeout is enabled, per_try_idle_timeout is enabled (it can only be done in configuration), and per-try-timeout is enabled, either through headers or configuration and its value is equal or within the backoff interval of the per_try_idle_timeout.
Clone Of:
Environment:
Last Closed:
Embargoed:
Attachments
(Terms of Use)
Description
Patrick Del Bello
2024-01-19 16:26:16 UTC
Envoy crashes when idle and request per try timeout occur within the backoff interval
Note
You need to
log in
before you can comment on or make changes to this bug.