Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2024-32976

Description

Envoy is a cloud-native, open source edge and service proxy. Envoyproxy with a Brotli filter can get into an endless loop during decompression of Brotli data with extra input.

POC

Reference

- https://github.com/envoyproxy/envoy/security/advisories/GHSA-7wp5-c2vq-4f8m

Github

No PoCs found on GitHub currently.