CVE-2024-34363
Envoy can crash due to uncaught nlohmann JSON exception
概要
Envoy can crash due to uncaught nlohmann JSON exception
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Envoy is a cloud-native, open source edge and service proxy. Due to how Envoy invoked the nlohmann JSON library, the library could throw an uncaught exception from downstream data if incomplete UTF-8 strings were serialized. The uncaught exception would cause Envoy to crash.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
envoy
[{"type":"SEMVER","events":[{"introduced":"1.28.0"},{"fixed":"1.28.4"},{"introduced":"1.29.0"},{"fixed":"1.29.5"},{"introduced":"1.30.0"},{"fixed":"1.30.2"}]}]
参照URL
- advisory github.com
- web nvd.nist.gov