CVE-2024-32975

Published: Jun 4, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Envoy is a cloud-native, open source edge and service proxy. There is a crash at `QuicheDataReader::PeekVarInt62Length()`. It is caused by integer underflow in the `QuicStreamSequencerBuffer::PeekRegion()` implementation.

Affected (4)

Products: Envoyproxy: Envoy

Envoyproxy

1 product

Envoy

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Envoyproxy Envoy	Before 1.27.6
Envoyproxy Envoy	From 1.28.0 to 1.28.4
Envoyproxy Envoy	From 1.29.0 to 1.29.5
Envoyproxy Envoy	From 1.30.0 to 1.30.2

Related CWEs

CWE-191

Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References (2)

https://github.com/envoyproxy/envoy/security/advisories/GHSA-g9mq-6v96-cpqc

Source: security-advisories@github.com

ExploitThird Party Advisory

https://github.com/envoyproxy/envoy/security/advisories/GHSA-g9mq-6v96-cpqc

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.