要点
- CVE-2026-26310 は github.com/envoyproxy/envoy, envoy (envoyproxy) に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
- 今後30日間に悪用される確率（EPSS）：0.41%（全脆弱性の 35.5% より高い）。
- 対処：1.35.8, 1.36.5, 1.34.13 以降に更新してください。
| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|
| github.com/envoyproxy/envoy Go | = 1.37.0≥ 1.35.0, ≤ 1.35.8≥ 1.36.0, ≤ 1.36.4≤ 1.34.12
| 修正版なし |
| envoy | = 1.37.0≥ 1.35.0, < 1.35.8≥ 1.36.0, < 1.36.5< 1.34.13
| 1.35.81.36.51.34.13
|
概要
Summary
Calling Utility::getAddressWithPort with a scoped IPv6 addresses causes a crash. This utility is called in the data plane from the original_src filter and the dns filter.
Details
The crashing function is Utility::getAddressWithPort. The crash occurs if a string containing a scoped IPv6 address is passed to this function.
This vulnerability affects:
- The original src filter: If the filter is configured and the original source is a scoped IPv6 address, it will cause a crash.
- DNS response address resolution: If a DNS response contains a scoped IPv6 address, this will also trigger the crash.
PoC
To reproduce the vulnerability:
- Method A (Original Src Filter): Configure the
original src filter in Envoy and provide a scoped IPv6 address as the original source.
- Method B (DNS Resolution): Trigger a DNS resolution process within Envoy where the DNS response contains a scoped IPv6 address.
Impact
This is a Denial of Service (DoS) vulnerability. It impacts users who have the original src filter configured or whose Envoy instances resolve addresses from DNS responses that may contain scoped IPv6 addresses.
NVD の説明
Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, calling Utility::getAddressWithPort with a scoped IPv6 addresses causes a crash. This utility is called in the data plane from the original_src filter and the dns filter. This vulnerability is fixed in 1.37.1, 1.36.5, 1.35.8, and 1.34.13.
github.com/envoyproxy/envoy のその他の脆弱性
すべて見る →これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン