CVE-2024-23322
- Source
- https://cve.org/CVERecord?id=CVE-2024-23322
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23322.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-23322
- Aliases
-
- BIT-envoy-2024-23322
- GHSA-6p83-mfmh-qv38
- Published
- 2024-02-09T22:51:53Z
- Modified
- 2026-08-12T15:14:59Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Envoy crashes when idle and request per try timeout occur within the backoff interval
- Details
-
Envoy is a high-performance edge/middle/service proxy. Envoy will crash when certain timeouts happen within the same interval. The crash occurs when the following are true: 1. hedge_on_per_try_timeout is enabled, 2. per_try_idle_timeout is enabled (it can only be done in configuration), 3. per-try-timeout is enabled, either through headers or configuration and its value is equal, or within the backoff interval of the per_try_idle_timeout. This issue has been addressed in released 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-416" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23322.json" }- References
Affected packages
Git / github.com/envoyproxy/envoy
Affected ranges
- Type
- GIT
- Repo
- https://github.com/envoyproxy/envoy
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedFixed
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "1.26.0" }, { "fixed": "1.26.7" }, { "introduced": "1.27.0" }, { "fixed": "1.27.3" }, { "introduced": "1.28.0" }, { "fixed": "1.28.1" }, { "introduced": "1.29.0" }, { "fixed": "1.29.1" } ], "source": [ "CPE_RANGE", "REFERENCES" ] }
Affected versions
v1.*
v1.26.0
v1.26.1
v1.26.2
v1.26.3
v1.26.4
v1.26.5
v1.26.6
v1.27.0
v1.27.1
v1.27.2
v1.28.0
v1.29.0
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23322.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"228270073838530491695487961077322894581",
"61088390952560571399318368946228711246",
"85012649853783538397515480809868282642",
"18868181262311821527743019773468169146"
],
"threshold": 0.9
},
"id": "CVE-2024-23322-1c5f22ca",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/envoyproxy/envoy/commit/843f9e6a123ed47ce139b421c14e7126f2ac685e",
"target": {
"file": "source/common/router/router.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"186506934802386101693882528347442499524",
"36098432078275374973240606718929334254",
"139548986029921242567597945456309657280",
"48531809800251678756431119390857557587",
"27072720606875193548215322613576415666",
"88658193679491350865502424393091920409",
"36743648382083424572231535183485347644",
"183420972641223939065882817243448039903"
],
"threshold": 0.9
},
"id": "CVE-2024-23322-598c341b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/envoyproxy/envoy/commit/843f9e6a123ed47ce139b421c14e7126f2ac685e",
"target": {
"file": "source/common/router/upstream_request.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "148786826013716339692147952620164609773",
"length": 267
},
"id": "CVE-2024-23322-b9d0efa6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/envoyproxy/envoy/commit/843f9e6a123ed47ce139b421c14e7126f2ac685e",
"target": {
"file": "source/common/router/upstream_request.cc",
"function": "UpstreamRequest::onPerTryIdleTimeout"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"295452394784285953143553417929840714084"
],
"threshold": 0.9
},
"id": "CVE-2024-23322-c22a1a06",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/envoyproxy/envoy/commit/843f9e6a123ed47ce139b421c14e7126f2ac685e",
"target": {
"file": "test/integration/http_timeout_integration_test.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "248297398052012443715227041806387533779",
"length": 1006
},
"id": "CVE-2024-23322-d201f0af",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/envoyproxy/envoy/commit/843f9e6a123ed47ce139b421c14e7126f2ac685e",
"target": {
"file": "source/common/router/router.cc",
"function": "Filter::onSoftPerTryTimeout"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "139082454428610377712668153787784358760",
"length": 450
},
"id": "CVE-2024-23322-fb233cb1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/envoyproxy/envoy/commit/843f9e6a123ed47ce139b421c14e7126f2ac685e",
"target": {
"file": "source/common/router/upstream_request.cc",
"function": "UpstreamRequest::onPerTryTimeout"
}
}
]
vanir_signatures_modified
"2026-08-12T15:14:59Z"