7.5
High
CVE-2024-45807 Envoy is a cloud-native high-performance edge/middle/service proxy
Description
Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's 1.31 is using `oghttp` as the default HTTP/2 codec, and there are potential bugs around stream management in the codec. To resolve this Envoy will switch off the `oghttp2` by default. The impact of this issue is that envoy will crash. This issue has been addressed in release version 1.31.2. All users are advised to upgrade. There are no known workarounds for this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| envoy 1.31 | 1.31.0 → < 1.31.2 | 1.31.2 |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of envoy
The 98 CVEs of envoy →
CVE-2026-73511
Envoy is an open source edge and service proxy designed for cloud-native applications
5.3
Medium
CVE-2026-73553
Envoy is an open source edge and service proxy designed for cloud-native applications
7.5
High
CVE-2026-73551
Envoy is an open source edge and service proxy designed for cloud-native applications
5.3
Medium
CVE-2026-73546
Envoy is an open source edge and service proxy designed for cloud-native applications
7.4
High