CVE-2024-45809

A flaw was found in Envoy. JWT filter will lead to a crash in Envoy when clearing the route cache with remote JWKs in the following cases: 1. Remote JWKs are used, which requires async header processing 2. clearroutecache is enabled on the provider 3. Header operations are enabled in JWT filter,...

Denial Of Service (DoS)

servicemesh-proxy is vulnerable to denial of service.The vulnerability exists due to the memory corruption in continueDecoding function in filter.cc, which allows an attacker to crash the application by providing a malicious input...