CVE-2024-53269

7.5 highEPSS 0.7%

High (7.5) in envoyproxy envoy. EPSS 0.7% chance of exploitation in the next 30 days.

Envoy is a cloud-native high-performance edge/middle/service proxy. When additional address are not ip addresses, then the Happy Eyeballs sorting algorithm will crash in data plane. This issue has been addressed in releases 1.32.2, 1.31.4, and 1.30.8. Users are advised to upgrade. Users unable to upgrade may disable Happy Eyeballs and/or change the IP configuration.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-670
Published: 2024-12-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

envoyproxy:envoy

References

https://github.com/envoyproxy/envoy/pull/37743/commits/3f62168d86aceb90f743f63b50cc711710b1c401
https://github.com/envoyproxy/envoy/security/advisories/GHSA-mfqp-7mmj-rm53
https://github.com/envoyproxy/envoy/security/advisories/GHSA-mfqp-7mmj-rm53

Check your stack JSON