Servers and applications
CVE-2024-45807
Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's 1.31 is using `oghttp` as the default HTTP/2 codec, and there are potential bugs around stream management in the codec. To resolve this Envoy will switch off the `oghttp2` by default. The impact of this issue is that envoy will crash. This issue has been addressed in release version 1.31.2. All users are advised to…
- Severity
- High 7.5
- Published
- 20 Sept 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 1.31.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
EnvoyServers and applications · cpe:a:envoyproxy:envoy |
|