cve.bz

CVE-2024-23323

5.3 mediumEPSS 0.5%

Medium (5.3) in envoyproxy envoy. EPSS 0.5% chance of exploitation in the next 30 days.

Envoy is a high-performance edge/middle/service proxy. The regex expression is compiled for every request and can result in high CPU usage and increased request latency when multiple routes are configured with such matchers. This issue has been addressed in released 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Severity

CVSS 3.1

5.3 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWEs
CWE-400, CWE-1176
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON