| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| github.com/envoyproxy/envoy | ≥ 1.34.0, < 1.34.11≥ 1.35.0, < 1.35.7≥ 1.36.0, < 1.36.3< 1.33.13 | 1.34.111.35.71.36.31.33.13 |
| envoy | ≥ 1.34.0, < 1.34.11≥ 1.35.0, < 1.35.7≥ 1.36.0, < 1.36.3< 1.33.13 | 1.34.111.35.71.36.31.33.13 |
Envoy’s mTLS certificate matcher for match_typed_subject_alt_names may incorrectly treat certificates containing an embedded null byte (\0) inside an OTHERNAME SAN value as valid matches.
This occurs when the SAN is encoded as a BMPSTRING or UNIVERSALSTRING, and its UTF-8 conversion result is truncated at the first null byte during string assignment. As a result, "victim\0evil" may match an exact: "victim" rule and be accepted by Envoy.
Create a CA and a server certificate signed by that CA. Create two client certificates signed by the same CA: client_evil with OTHERNAME BMPSTRING = "evil" client_null with OTHERNAME BMPSTRING = "victim\0evil" Configure Envoy with require_client_certificate: true and a match_typed_subject_alt_names entry for the OTHERNAME OID with matcher.exact: "victim". Connect without a client cert → connection rejected. Connect with client_evil → connection rejected. Connect with client_null → connection accepted (but shouldn't!).
An attacker who can obtain a trusted client certificate with a null byte embedded in an OTHERNAME SAN can exploit this vulnerability. The practical impact is unauthorized impersonation of the matched identity, enabling access to services or APIs protected by that exact OTHERNAME check.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン