CVE-2024-23325

Envoy is a high-performance edge/middle/service proxy. Envoy crashes in Proxy protocol when using an address type that isn’t supported by the OS. Envoy is susceptible to crashing on a host with IPv6 disabled and a listener config with proxy protocol enabled when it receives a request where the client presents its IPv6 address. It is valid for a client to present its IPv6 address to a target server even though the whole chain is connected via IPv4. This issue has been addressed in released 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-248
• CWE-755
• CWE-755

• https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237Patch, Vendor Advisory
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-5m7c-mrwr-pm26Vendor Advisory
• https://github.com/envoyproxy/envoy/commit/bacd3107455b8d387889467725eb72aa0d5b5237Patch, Vendor Advisory
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-5m7c-mrwr-pm26Vendor Advisory

Published

Feb 9, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2332A vulnerability was found in SourceCodester Online Mobile Ma…7.2
• CVE-2024-23320Improper Input Validation vulnerability in Apache DolphinSch…8.8
• CVE-2024-23321For RocketMQ versions 5.2.0 and below, under certain conditi…8.8
• CVE-2024-23322Envoy is a high-performance edge/middle/service proxy. Envoy…7.5
• CVE-2024-23323Envoy is a high-performance edge/middle/service proxy. The r…5.3
• CVE-2024-23324Envoy is a high-performance edge/middle/service proxy. Exter…7.5
• CVE-2024-23326Envoy is a cloud-native, open source edge and service proxy.…8.2
• CVE-2024-23327Envoy is a high-performance edge/middle/service proxy. When …7.5
• CVE-2024-23328Dataease is an open source data visualization analysis tool.…9.1
• CVE-2024-23329 changedetection.io is an open source tool designed to monit…3.7
• CVE-2024-2333A vulnerability classified as critical has been found in Cod…7.2
• CVE-2024-23330Tuta is an encrypted email service. In versions prior to 119…5.3