We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-35944

Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes



AssignerGitHub_M
Reserved2023-06-20
Published2023-07-25
Updated2024-10-23

Description

Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal scheme checks are case-sensitive. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, this can lead to the rejection of requests with mixed-case schemes such as `htTp` or `htTps`, or the bypassing of some requests such as `https` in unencrypted connections. With a fix in versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, Envoy will now lowercase scheme values by default, and change the internal scheme checks that were case-sensitive to be case-insensitive. There are no known workarounds for this issue.



HIGH: 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Product status

>= 1.26.0, < 1.26.4
affected

>= 1.25.0, < 1.25.9
affected

>= 1.24.0, < 1.24.10
affected

< 1.23.12
affected

References

https://github.com/envoyproxy/envoy/security/advisories/GHSA-pvgm-7jpg-pw5g

cve.org CVE-2023-35944

nvd.nist.gov CVE-2023-35944

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-35944
Subscribe to our newsletter to learn more about our work.