Lucene search
GoogleOSV:BIT-ENVOY-2024-32976HistoryJun 06, 2024 - 7:18 a.m.
BIT-envoy-2024-32976
2024-06-0607:18:14
Google
osv.dev
12
envoy
brotli filter
endless loop
cloud-native
open source
service proxy
security vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
17.0%
Envoy is a cloud-native, open source edge and service proxy. Envoyproxy with a Brotli filter can get into an endless loop during decompression of Brotli data with extra input.
Related
nvd
nvd
CVE-2024-32976
2024-06-04 21:15:34
cve
cve
CVE-2024-32976
2024-06-04 21:15:34
vulnrichment
vulnrichment
redhatcve
redhatcve
CVE-2024-32976
2024-06-14 02:12:33
cvelist
cvelist
veracode
veracode
Infinite Loop
2024-06-07 05:21:43
nessus
nessus
Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2024-037)
2024-06-24 00:00:00
Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-647)
2024-06-24 00:00:00
Tenable.ad < 3.59.5 Multiple Vulnerabilities (TNS-2024-11)
2024-07-08 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
17.0%
Related for OSV:BIT-ENVOY-2024-32976