Lucene search
+L

1 matches found

OSV
OSV
added 2024/04/20 7:17 a.m.27 views

BIT-ENVOY-2024-32475 Envoy RELEASE_ASSERT using auto_sni with :authority header > 255 bytes

Envoy is a cloud-native, open source edge and service proxy. When an upstream TLS cluster is used with autosni enabled, a request containing a host/:authority header longer than 255 characters triggers an abnormal termination of Envoy process. Envoy does not gracefully handle an error when settin...

7.5CVSS7.3AI score0.00679EPSS
SaveExploits0References3
Rows per page
Query Builder