Description

Envoy is a cloud-native, open source edge and service proxy. Due to how Envoy invoked the nlohmann JSON library, the library could throw an uncaught exception from downstream data if incomplete UTF-8 strings were serialized. The uncaught exception would cause Envoy to crash.

Remediation

References

CVE-2024-34363

Related Vulnerabilities

WebLogic CVE-2020-14882 Vulnerability (CVE-2020-14882)

MySQL CVE-2015-4752 Vulnerability (CVE-2015-4752)

WordPress Plugin Monsters Editor for WP Super Edit Arbitrary File Upload (1.1)

WordPress Plugin Mail Masta Local File Inclusion (1.0)

Magento Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Vulnerability (CVE-2019-8126)

Severity

High

Classification

CVE-2024-34363 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities