CVE-2024-23322 | envoyproxy envoy up to 1.26.7/1.27.3/1.28.1/1.29.1 Timeout use after free (GHSA-6p83-mfmh-qv38)

A vulnerability was found in envoyproxy envoy up to 1.26.7/1.27.3/1.28.1/1.29.1. It has been declared as problematic. This vulnerability affects unknown code of the component Timeout Handler. The manipulation leads to use after free.

This vulnerability was named CVE-2024-23322. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.