CVE-2024-53270

Summary

CVE-2024-53270 is a vulnerability affecting Envoy, a cloud-native high-performance edge/middle/service proxy. The issue arises when `sendOverloadError` assumes the existence of an active request, but `active_request` is actually null. This occurs when `envoy.load_shed_points.http1_server_abort_dispatch` is configured. Consequently, if the stream is already reset, `onMessageBeginImpl()` will directly return an ok status, leading to a nullptr reference and potential crashes. Envoy users are advised to upgrade to releases 1.32.3, 1.31.5, 1.30.9, or 1.29.12 to address this vulnerability. Alternatively, users can disable the `http1_server_abort_dispatch` load shed point or set a high threshold to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.