Vulnerability · Published Mar 21, 2025 · Assigned by GitHub_M
CVE-2025-30157Envoy crashes when HTTP ext_proc processes local replies
Medium 6.5
In plain English
A medium-severity security flaw in envoy from envoyproxy. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy's ext_proc HTTP filter is at risk of crashing if a local reply is sent to the external server due to the filter's life time issue. A known situation is the failure of a websocket handshake will trigger a local reply leading to the crash of Envoy. This vulnerability is fixed in 1.33.1, 1.32.4, 1.31.6, and 1.30.10.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/envoyproxy/envoy | 1.30.10 | GHSA-cf3q-gqg7-3fm9 |
| Go | github.com/envoyproxy/envoy | 1.31.6 | GHSA-cf3q-gqg7-3fm9 |
| Go | github.com/envoyproxy/envoy | 1.32.4 | GHSA-cf3q-gqg7-3fm9 |
| Go | github.com/envoyproxy/envoy | 1.33.1 | GHSA-cf3q-gqg7-3fm9 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| envoyproxy | envoy | >= 1.33.0, < 1.33.1>= 1.32.0, < 1.32.4>= 1.31.0, < 1.31.6< 1.30.10 |
Weakness: CWE-460 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H