Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-34363

Envoy can crash due to uncaught nlohmann JSON exception

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Envoy is a cloud-native, open source edge and service proxy. Due to how Envoy invoked the nlohmann JSON library, the library could throw an uncaught exception from downstream data if incomplete UTF-8 strings were serialized. The uncaught exception would cause Envoy to crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

envoyproxy envoy

  • >= 1.30.0, <= 11.30.1affected
  • >= 1.29.0, <= 1.29.4affected
  • >= 1.28.0, <= 1.28.3affected

References