{"id":"CVE-2024-23325","summary":"Envoy crashes when using an address type that isn’t supported by the OS","details":"Envoy is a high-performance edge/middle/service proxy. Envoy crashes in Proxy protocol when using an address type that isn’t supported by the OS. Envoy is susceptible to crashing on a host with IPv6 disabled and a listener config with proxy protocol enabled when it receives a request where the client presents its IPv6 address.  It is valid for a client to present its IPv6 address to a target server even though the whole chain is connected via IPv4. This issue has been addressed in released 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.","aliases":["BIT-envoy-2024-23325","GHSA-5m7c-mrwr-pm26"],"modified":"2026-08-12T15:16:59.583959Z","published":"2024-02-09T22:47:13.048Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-248","CWE-755"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23325.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23325.json"},{"type":"ADVISORY","url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-5m7c-mrwr-pm26"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23325"},{"type":"FIX","url":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/envoyproxy/envoy","events":[{"introduced":"51964702956d64adcd1df6b8ea132e863fe78e74"},{"fixed":"a0e580408ef4568b0a16c6663b6d8ae0c46aba6a"},{"introduced":"7bba38b743bb3bca22dffb4a21c38ccc155fbef8"},{"fixed":"0fd81ee7ffcd7cfc864094b24dc9b5c3ade89ff2"},{"introduced":"b5ca88acee3453c9459474b8f22215796eff4dde"},{"fixed":"0de8b2b94c75dbe8c2f897058e16d23d959783fa"},{"introduced":"a6d1d66a62b985baed414ba90ad0daebfc074664"},{"fixed":"4fda4d79d06e1bd59e591be3f348223495083648"},{"fixed":"bacd3107455b8d387889467725eb72aa0d5b5237"}],"database_specific":{"cpe":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.26.0"},{"fixed":"1.26.7"},{"introduced":"1.27.0"},{"fixed":"1.27.3"},{"introduced":"1.28.0"},{"fixed":"1.28.1"},{"introduced":"1.29.0"},{"fixed":"1.29.1"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v1.29.0","v1.28.0","v1.27.2","v1.26.6","v1.27.1","v1.26.5","v1.27.0","v1.26.4","v1.26.3","v1.26.2","v1.26.1","v1.26.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23325.json","vanir_signatures_modified":"2026-08-12T15:16:59Z","vanir_signatures":[{"target":{"file":"source/common/network/address_impl.cc","function":"Ipv6Instance::validateProtocolSupported"},"deprecated":false,"digest":{"function_hash":"135511400732941161038973666046790339774","length":292},"id":"CVE-2024-23325-07b8144a","signature_type":"Function","signature_version":"v1","source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237","target":{"file":"test/config/integration/certs/clientcert_hash.h"},"deprecated":false,"digest":{"line_hashes":["17631902614748585699696620642617580602"],"threshold":0.9},"id":"CVE-2024-23325-48ee257d"},{"signature_version":"v1","source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237","target":{"file":"source/extensions/filters/listener/proxy_protocol/proxy_protocol.cc","function":"Filter::parseV2Header"},"deprecated":false,"digest":{"function_hash":"25359981968817945953386169842177493856","length":2724},"id":"CVE-2024-23325-679f14a7","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"201158163630751030770539045593931927849","length":291},"id":"CVE-2024-23325-6ea57f2e","signature_type":"Function","signature_version":"v1","source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237","target":{"file":"source/common/network/address_impl.cc","function":"Ipv4Instance::validateProtocolSupported"}},{"signature_version":"v1","source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237","target":{"file":"source/extensions/transport_sockets/tls/utility.cc"},"deprecated":false,"digest":{"line_hashes":["273784474149920105236860516760390884441","183244329710537269795992673929968907327","272917149578078023438873940141577712562","1982175428515018888367102185544558103","143455427813509102495858749548055149319","182592788422133601878948679502661176760","231865823893164203768144167526215206332","186352890608397248901778494155360034624"],"threshold":0.9},"id":"CVE-2024-23325-8c6121f9","signature_type":"Line"},{"id":"CVE-2024-23325-94965f18","signature_type":"Line","signature_version":"v1","source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237","target":{"file":"source/extensions/transport_sockets/tls/connection_info_impl_base.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["204190978545985745041630236953331891025","215791977761714342492161735323230327423","48015210103154607763312101101556570712","333295453026847607867083325085470879506"]}},{"id":"CVE-2024-23325-a5589759","signature_type":"Line","signature_version":"v1","source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237","target":{"file":"test/extensions/transport_sockets/tls/integration/ssl_integration_test.cc"},"deprecated":false,"digest":{"line_hashes":["269542986872752943836813848698954300115","233135741554760672169858487812069221627","62163209548112902765446277074357170325"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"318519094112617404068777419836747931168","length":447},"id":"CVE-2024-23325-b3dc75c3","signature_type":"Function","signature_version":"v1","source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237","target":{"file":"source/extensions/transport_sockets/tls/connection_info_impl_base.cc","function":"ConnectionInfoImplBase::ipSansPeerCertificate"}},{"source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237","target":{"file":"source/common/network/address_impl.cc"},"deprecated":false,"digest":{"line_hashes":["313832019374486494352714366729744461868","250554408466220254099891435167728924437","191251380888875015583082857526325242593","102106317377123881303154460851428811433","134102772836611108256141695801152850398","241229611538593068629317374990161965413","322738633149287833713974579033302263929","81075462605107603427238066942654892067","35085920979507410188765371684894723805","219131006777445170238751231822790024450","165259521592143663921712533186606256168","332818425047983985454527188784171793541"],"threshold":0.9},"id":"CVE-2024-23325-b76d162a","signature_type":"Line","signature_version":"v1"},{"target":{"file":"source/common/network/address_impl.h"},"deprecated":false,"digest":{"line_hashes":["222462469145017434429226204693687582139","21493641790700688731489934443646671976","26979831361250002569236138219226800757","268131810100179026473966449440564771173","73988030540615651841361313912454525053","124601286450378721988731989893318802563","236586565161215528655888955836691476789","960968633418461293779710621471136002","201621865966354949207600870913483740478","186128455840364896911203877164540400186","257403847097506898756253073230690873754","240471797111759594647276105162867428157","120535668732203265767869493536699620500","294721281718447114258740289932556884948"],"threshold":0.9},"id":"CVE-2024-23325-cc6ede56","signature_type":"Line","signature_version":"v1","source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237"},{"target":{"file":"source/extensions/filters/listener/proxy_protocol/proxy_protocol.cc"},"deprecated":false,"digest":{"line_hashes":["154233604237028338953022523212680883675","337226565544893239274055327648878256575","109705867231495216530118715579471216412","18223843416137040454368657609081561906","238336529653982427702440133976286344735","304765714380436533975256820701071866697","201595470333605662797353282114787729748","176192032401770578220800312090107401371","227745296731433757073220070631680023549","290280261085675347130790852694064474853","109677013783279843011121545655811015440","51028502885517570511550672904742185481","177657844814513800047542186980463279089","150956112360425011017487563878504962380","24871855619418050503322846229868336042","244282333514535545147104310920328356625"],"threshold":0.9},"id":"CVE-2024-23325-d32eb7f4","signature_type":"Line","signature_version":"v1","source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237"},{"source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237","target":{"file":"test/extensions/filters/listener/proxy_protocol/proxy_protocol_test.cc"},"deprecated":false,"digest":{"line_hashes":["47640999926419406114553628097245073631","38567617124436987616680630558842928433","193247198304070841367656765712056983806","210374764902801330287674229037846748259","261829599146491647650878938229385044359","150098744969303129744464687821611367806","137289306130493770048324606131008544449","110835487484290036687695077642916428865","80370481462418767713542274631985619895","305141360394252914745812238508256082520"],"threshold":0.9},"id":"CVE-2024-23325-e7e8cabe","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"105278985518418866260115829995258103165","length":444},"id":"CVE-2024-23325-edd3f2b8","signature_type":"Function","signature_version":"v1","source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237","target":{"file":"source/extensions/transport_sockets/tls/utility.cc","function":"Utility::getSubjectAltNames"}},{"source":"https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237","target":{"file":"source/extensions/transport_sockets/tls/utility.h"},"deprecated":false,"digest":{"line_hashes":["314983725193765693955761910689404173559","161726803414960035608362768468152163794","86759337618137491211629902968895855480","47017027893185875777616314334573830225"],"threshold":0.9},"id":"CVE-2024-23325-f26b3223","signature_type":"Line","signature_version":"v1"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}