CVE-2024-53269

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-53269
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53269.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-53269
Aliases
Published
2024-12-18T19:12:17.033Z
Modified
2026-04-10T05:18:21.725941Z
Severity
  • 4.5 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Happy Eyeballs: Validate that additional_address are IP addresses instead of crashing when sorting in envoy
Details

Envoy is a cloud-native high-performance edge/middle/service proxy. When additional address are not ip addresses, then the Happy Eyeballs sorting algorithm will crash in data plane. This issue has been addressed in releases 1.32.2, 1.31.4, and 1.30.8. Users are advised to upgrade. Users unable to upgrade may disable Happy Eyeballs and/or change the IP configuration.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53269.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-670"
    ]
}
References

Affected packages

Git / github.com/envoyproxy/envoy

Affected ranges

Type
GIT
Repo
https://github.com/envoyproxy/envoy
Events
Introduced
86dc7ef91ca15fb4957a74bd599397413fc26a24
Fixed
a0504e87c5a246cb097b37049b1e4dc7706c2a90
Database specific 
{
    "versions": [
        {
            "introduced": "1.32.0"
        },
        {
            "fixed": "1.32.2"
        }
    ]
}
Type
GIT
Repo
https://github.com/envoyproxy/envoy
Events
Introduced
7b8baff1758f0a584dcc3cb657b5032000bcb3d7
Fixed
d045f4201477d50bc64a3bd38c28cfec67c272ca
Database specific 
{
    "versions": [
        {
            "introduced": "1.31.0"
        },
        {
            "fixed": "1.31.4"
        }
    ]
}
Type
GIT
Repo
https://github.com/envoyproxy/envoy
Events
Introduced
50ea83e602d5da162df89fd5798301e22f5540cf
Fixed
ea0914ec4041695332fe0433a3a9bb3eba3d97a8
Database specific 
{
    "versions": [
        {
            "introduced": "1.30.0"
        },
        {
            "fixed": "1.30.8"
        }
    ]
}

Affected versions

v1.*
v1.30.0
v1.30.1
v1.30.2
v1.30.3
v1.30.4
v1.30.5
v1.30.6
v1.30.7
v1.31.0
v1.31.1
v1.31.2
v1.31.3
v1.32.0
v1.32.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53269.json"