CVE-2024-34363
Envoy can crash due to uncaught nlohmann JSON exception
Summary
Envoy can crash due to uncaught nlohmann JSON exception
Original description
The description as published by the source.
Envoy is a cloud-native, open source edge and service proxy. Due to how Envoy invoked the nlohmann JSON library, the library could throw an uncaught exception from downstream data if incomplete UTF-8 strings were serialized. The uncaught exception would cause Envoy to crash.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
envoy
[{"type":"SEMVER","events":[{"introduced":"1.28.0"},{"fixed":"1.28.4"},{"introduced":"1.29.0"},{"fixed":"1.29.5"},{"introduced":"1.30.0"},{"fixed":"1.30.2"}]}]
References
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com