medium5.7
CVE-2024-34364
Envoy is a cloud-native, open source edge and service proxy.
Impact
Envoy is a cloud-native, open source edge and service proxy. Envoy exposed an out-of-memory (OOM) vector from the mirror response, since async HTTP client will buffer the response with an unbounded buffer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Envoyproxy | Envoy | before 1.27.6 from 1.28.0 before 1.28.4 from 1.29.0 before 1.29.5 from 1.30.0 before 1.30.2 |