Threats Tagged 'cve-2024-45810'
View all threats tagged with 'cve-2024-45810'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2024-45810'
Click on any threat for detailed analysis and mitigation recommendations
Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an OpenShift Container Platform installation. Security Fix(es): * send: Code Execution Vulnerability in Send Library (CVE-2024-43799) * serve-static: Improper Sanitization in serve-static (CVE-2024-43800) * express: Improper Input Handling in Express Redirects (CVE-2024-43796) * path-to-regexp: Backtracking regular expressions cause ReDoS (CVE-2024-45296) * webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule (CVE-2024-43788) * body-parser: Denial of Service Vulnerability in body-parser (CVE-2024-45590) * envoy: Malicious log injection via access logs (CVE-2024-45808) * envoy: Potential to manipulate `x-envoy` headers from external sources (CVE-2024-45806) * envoy: Envoy crashes for `LocalReply` in HTTP async client (CVE-2024-45810) * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264) * envoy: Potential to manipulate `x-envoy` headers from external sources (CVE-2024-45806) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Join the discussion | GCVE Database | 10/07/2024, 09:24:48 UTC Added: 06/02/2026, 21:44:01 UTC |
0 Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy will crash when the http async client is handling `sendLocalReply` under some circumstance, e.g., websocket upgrade, and requests mirroring. The http async client will crash during the `sendLocalReply()` in http async client, one reason is http async client is duplicating the status code, another one is the destroy of router is called at the destructor of the async stream, while the stream is deferred deleted at first. There will be problems that the stream decoder is destroyed but its reference is called in `router.onDestroy()`, causing segment fault. This will impact ext_authz if the `upgrade` and `connection` header are allowed, and request mirrorring. This issue has been addressed in versions 1.31.2, 1.30.6, 1.29.9, and 1.28.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. Join the discussion | CVE Database V5 | 09/19/2024, 23:34:22 UTC Added: 01/30/2026, 20:12:48 UTC |
Showing 1 to 2 of 2 results