| ID |
CVE-2021-32780
|
| Summary |
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it receives a GOAWAY frame without any streams outstanding. The connection state is transitioned to DRAINING when it receives a SETTING frame with the SETTINGS_MAX_CONCURRENT_STREAMS parameter set to 0. Receiving these two frames in the same I/O event results in abnormal termination of the Envoy process due to invalid state transition from CLOSED to DRAINING. A sequence of H/2 frames delivered by an untrusted upstream server will result in Denial of Service in the presence of untrusted **upstream** servers. Envoy versions 1.19.1, 1.18.4 contain fixes to stop processing of pending H/2 frames after connection transition to the CLOSED state. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:envoyproxy:envoy:1.19.0:*:*:*:*:*:*:*
cpe:2.3:a:envoyproxy:envoy:1.19.0:*:*:*:*:*:*:*
-
cpe:2.3:a:envoyproxy:envoy:1.18.0:*:*:*:*:*:*:*
cpe:2.3:a:envoyproxy:envoy:1.18.0:*:*:*:*:*:*:*
-
cpe:2.3:a:envoyproxy:envoy:1.18.1:*:*:*:*:*:*:*
cpe:2.3:a:envoyproxy:envoy:1.18.1:*:*:*:*:*:*:*
-
cpe:2.3:a:envoyproxy:envoy:1.18.2:*:*:*:*:*:*:*
cpe:2.3:a:envoyproxy:envoy:1.18.2:*:*:*:*:*:*:*
-
cpe:2.3:a:envoyproxy:envoy:1.18.3:*:*:*:*:*:*:*
cpe:2.3:a:envoyproxy:envoy:1.18.3:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 5.0 (as of 15-06-2022 - 15:48) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-754 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| Last major update |
15-06-2022 - 15:48 |
| Published |
24-08-2021 - 21:15 |
| Last modified |
15-06-2022 - 15:48 |
