CVE-2024-34363
Envoy can crash due to uncaught nlohmann JSON exception
Résumé
Envoy can crash due to uncaught nlohmann JSON exception
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Envoy is a cloud-native, open source edge and service proxy. Due to how Envoy invoked the nlohmann JSON library, the library could throw an uncaught exception from downstream data if incomplete UTF-8 strings were serialized. The uncaught exception would cause Envoy to crash.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
envoy
[{"type":"SEMVER","events":[{"introduced":"1.28.0"},{"fixed":"1.28.4"},{"introduced":"1.29.0"},{"fixed":"1.29.5"},{"introduced":"1.30.0"},{"fixed":"1.30.2"}]}]
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com