OSV-2018-95 Heap-use-after-free in Envoy::FakeConnectionBase::close
A heap-use-after-free in Envoy's connection handling allows attackers to cause crashes or potentially execute code via network traffic.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is OSV-2018-95?
OSV-2018-95 is an use after free vulnerability in envoy, published on 13 Jan 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8783
Crash type: Heap-use-after-free READ 1
Crash state:
Envoy::FakeConnectionBase::close
Envoy::Event::DispatcherImpl::runPostCallbacks
event_process_active_single_queue
Which versions are affected by OSV-2018-95?
1 open source package ship an affected version, including envoy.
| Package | Affected | Fixed in |
|---|---|---|
envoy OSS-Fuzz | All versions | None |
How do I fix OSV-2018-95?
No fix has been published for OSV-2018-95 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is OSV-2018-95 being exploited?
There is no known exploitation of OSV-2018-95 in the wild and no public exploit code.