We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-35943

Envoy vulnerable to CORS filter segfault when origin header is removed



AssignerGitHub_M
Reserved2023-06-20
Published2023-07-25
Updated2024-10-24

Description

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, the CORS filter will segfault and crash Envoy when the `origin` header is removed and deleted between `decodeHeaders`and `encodeHeaders`. Versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12 have a fix for this issue. As a workaround, do not remove the `origin` header in the Envoy configuration.



MEDIUM: 6.3CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H

Product status

>= 1.26.0, < 1.26.4
affected

>= 1.25.0, < 1.25.9
affected

>= 1.24.0, < 1.24.10
affected

< 1.23.12
affected

References

https://github.com/envoyproxy/envoy/security/advisories/GHSA-mc6h-6j9x-v3gq

cve.org CVE-2023-35943

nvd.nist.gov CVE-2023-35943

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-35943
Subscribe to our newsletter to learn more about our work.