vulnerability

Amazon Linux AMI 2: CVE-2024-23323: Security patch for ecs-service-connect-agent (ALASECS-2024-034)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Feb 9, 2024
Added
Mar 6, 2024
Modified
Jan 28, 2025

Description

Envoy is a high-performance edge/middle/service proxy. The regex expression is compiled for every request and can result in high CPU usage and increased request latency when multiple routes are configured with such matchers. This issue has been addressed in released 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Solution

amazon-linux-ami-2-upgrade-ecs-service-connect-agent
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.