Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2024-53269 — MEDIUM severity vulnerability | Release Alert

CVE-2024-53269

4.5

MEDIUMCVSS v3

Published

December 18, 2024

Affected

9 projects

Assigned by

GitHub

Severity scale

010

Description

Envoy is a cloud-native high-performance edge/middle/service proxy. When additional address are not ip addresses, then the Happy Eyeballs sorting algorithm will crash in data plane. This issue has been addressed in releases 1.32.2, 1.31.4, and 1.30.8. Users are advised to upgrade. Users unable to upgrade may disable Happy Eyeballs and/or change the IP configuration.

envoyproxy/envoy

GitHubCloud-native high-performance edge/middle/service proxy

>= 1.30.0, < 1.30.8, >= 1.31.0, < 1.31.4, >= 1.32.0, < 1.32.2NVD

istio/envoy

GitHubFork of Envoy used for testing and tinkering as part of the Istio dev process

>= 1.30.0, < 1.30.8, >= 1.31.0, < 1.31.4, >= 1.32.0, < 1.32.2NVD

envoy

More on this CVE

NVD↗GitHub Advisory↗

Python Package Index

Simple API for running external processes.

>= 1.30.0, < 1.30.8, >= 1.31.0, < 1.31.4, >= 1.32.0, < 1.32.2NVD

Envoy

NuGet GalleryWith the mediator pattern, communication between objects is encapsulated within a mediator object. Objects no longer communicate directly with each other, but instead communicate through the mediator. This reduces the dependencies between communicating objects, thereby reducing coupling.

>= 1.30.0, < 1.30.8, >= 1.31.0, < 1.31.4, >= 1.32.0, < 1.32.2NVD