BIT-ENVOY-2024-45806 Potential manipulate `x-envoy` headers from external sources in envoy

Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...

CVE-2024-45806

Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...

CVE-2024-45806 Potential manipulate `x-envoy` headers from external sources in envoy

Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...

Denial Of Service (DoS)

vLLM library is vulnerable to Denial of Service DoS. The vulnerability is caused due to improper handling of completions API requests with an empty prompt, which allows an attacker to crash the server, resulting in service disruption...

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service failures.

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the mutual blocking of execution streams. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service failures.

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a malicious actor to cause...

Vulnerability of the H5F_addr_decode_len() function in the H5Fint.c file of the HDF5 library, which allows a hacker to cause a service failure.

The vulnerability of the H5Faddrdecodelen function in the H5Fint.c file of the HDF5 library is related to memory-walk attacks. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the Firefox web browser relates to the lack of protection for website structures, allowing attackers to compromise data integrity and cause service interruptions.

The vulnerability in the Firefox web browser is related to the lack of security measures for protecting the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service interruptions...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the `drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c` component of the Linux operating system, related to insufficient handling of format strings, allows an attacker to access confidential data and also cause service interruptions.

The vulnerability of the drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c component in the Linux operating system is related to insufficient handling of the format string issue. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service...

The vulnerability in the `drivers/usb/gadget/function/f_ncm.c` component of the Linux operating system, related to pointer assignment errors, allows an attacker to cause a service failure.

The vulnerability in the drivers/usb/gadget/function/fncm.c component of the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of open-source development environments for UEFI EDK2, related to configuration errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of open-source development environments for UEFI EDK2 is related to configuration errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the Firefox web browser, related to insufficient registration checks, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to insufficient verification of registrations. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the net/wireless/nl80211.c component in the Linux operating system, related to improper energy consumption restrictions, allows attackers to gain access to confidential data and cause service failures.

The vulnerability of the net/wireless/nl80211.c component in the Linux operating system is related to improper energy consumption restrictions. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and also cause service failures...

The vulnerability in the Firefox web browser, related to writing beyond the buffer, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Linux operating system’s AOE kernel driver, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s AOE kernel driver is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the ec2_key module in the Ansible configuration management system, due to deficiencies in the authentication process, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the ec2key module in the Ansible configuration management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows attackers to access sensitive data, compromise its integrity, and cause service failures...

The vulnerability of the decode_status_report() function in the OFono mobile communication interface, related to the issue of operations going beyond the buffer in memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decodestatusreport function in the OFono mobile communication interface is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to access confidential data, compromise its integrity, and cause...

The vulnerability in the Firefox web browser relates to improper handling of memory barriers between protected memory regions. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to improper handling of overlaps between protected memory regions. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the LibGD graphics library, related to reading beyond the allowed buffer data limits, allows attackers to cause service interruptions.

The vulnerability of the LibGD graphics library is related to reading data beyond the acceptable buffer limit. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...