CVE-2021-32781 — Use After Free in Envoy

CWE-416 — Use After FreeCWE-120 — Classic Buffer OverflowCWE-476 — NULL Pointer Dereference2 documents2 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 77.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Envoyproxy Envoy
Timeline
PublishedAug 24

Description

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions after Envoy sends a locally generated response it must stop further processing of request or response data. However when local response is generated due the internal buffer overflow while request or response is processed by the filter chain the operation may not be stopped completely and result in accessing a freed memory block. A specifically constructed request …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDenvoyproxy/envoy1.16.0 — 1.16.5+3
▶CVEListV5envoyproxy/envoy4 versions+3

📋Vendor Advisories

1
Red Hat
envoyproxy/envoy: denial of service when using extensions that modify request or response sizes↗2021-08-24
▶
CVE-2021-32781 — Use After Free in Envoyproxy Envoy | cvebase