https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 17:31:55 +0000 https://cve.radiocsirt.org/vuln/bit-envoy-2024-32974 <p><strong>Affected:</strong> Bitnami: envoy</p> <p>Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `EnvoyQuicServerStream::OnInitialHeadersComplete()` with following call stack. It is a use-after-free caused by QUICHE continuing push request headers after `StopReading()` being called on the stream. As after `StopReading()`, the HCM&#39;s `ActiveStream` might have already be destroyed and any up calls from QUICHE could potentially cause use after free.</p> <p><strong>Affected:</strong> Bitnami: envoy</p> <p>Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `EnvoyQuicServerStream::OnInitialHeadersComplete()` with following call stack. It is a use-after-free caused by QUICHE continuing push request headers after `StopReading()` being called on the stream. As after `StopReading()`, the HCM&#39;s `ActiveStream` might have already be destroyed and any up calls from QUICHE could potentially cause use after free.</p> https://cve.radiocsirt.org/vuln/bit-envoy-2024-32974 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0538 certfr-2024-avi-0538 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0538 https://cve.radiocsirt.org/vuln/euvd-2026-5267 EUVD-2026-5267 https://cve.radiocsirt.org/vuln/euvd-2026-5267 https://cve.radiocsirt.org/vuln/fkie_cve-2024-32974 <p>Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `EnvoyQuicServerStream::OnInitialHeadersComplete()` with following call stack. It is a use-after-free caused by QUICHE continuing push request headers after `StopReading()` being called on the stream. As after `StopReading()`, the HCM&#39;s `ActiveStream` might have already be destroyed and any up calls from QUICHE could potentially cause use after free.</p> <p>Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `EnvoyQuicServerStream::OnInitialHeadersComplete()` with following call stack. It is a use-after-free caused by QUICHE continuing push request headers after `StopReading()` being called on the stream. As after `StopReading()`, the HCM&#39;s `ActiveStream` might have already be destroyed and any up calls from QUICHE could potentially cause use after free.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-32974 https://cve.radiocsirt.org/vuln/gsd-2024-32974 gsd-2024-32974 https://cve.radiocsirt.org/vuln/gsd-2024-32974