Tóm tắt nhanh
- CVE-2025-30157 là lỗ hổng mức CAO (CVSS 7.5) ảnh hưởng github.com/envoyproxy/envoy, envoy (envoyproxy).
- Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.44%, cao hơn 37.9% các lỗ hổng khác.
- Cách xử lý: cập nhật lên 1.31.6, 1.32.4, 1.33.1, 1.30.10 hoặc mới hơn.
| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|
| github.com/envoyproxy/envoy Go | ≥ 1.31.0, < 1.31.6≥ 1.32.0, < 1.32.4≥ 1.33.0, < 1.33.1< 1.30.10
| 1.31.61.32.41.33.11.30.10
|
| envoy | = 1.33.0≥ 1.31.0, < 1.31.6≥ 1.32.0, < 1.32.4< 1.30.10
| 1.31.61.32.41.30.10
|
Mô tả
Summary
Envoy's ext_proc HTTP filter is at risk of crashing if a local reply is sent to the external server due to the filter's life time issue. A known situation is the fail of a websocket handshake will trigger a local reply leading to the crash of Envoy.
PoC
If both websocket and ext_proc are enabled, a failed handshake will trigger a local reply, thus ext_proc will crash.
Mitigation
- Disable websocket traffic
- Change the websocket response from backend to always return
101 Switch protocol based on RFC.
- Apply the patch and the ext_proc filter will not send the local reply that is generated by Envoy to the ext_proc server for processing.
- Apply the patch that the router will cancel the upstream requests when sending a local reply.
Impact
Denial of service
Reporter
Vasilios Syrakis
Fernando Cainelli
Mô tả của NVD
Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy's ext_proc HTTP filter is at risk of crashing if a local reply is sent to the external server due to the filter's life time issue. A known situation is the failure of a websocket handshake will trigger a local reply leading to the crash of Envoy. This vulnerability is fixed in 1.33.1, 1.32.4, 1.31.6, and 1.30.10.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí