onyx

onyx --cves cve-2025-54588

CVE-2025-54588

HIGHEnvoy Proxy
score
<0.1
cvss
7.5
epss
0.5%
published
2025-09-03
kev added
—
first seen

Envoy 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free vulnerability in the DNS cache caused by triggering new or removing pending DNS resolutions in the Dynamic Forward Proxy, letting attackers cause abnormal process termination, exploit requires dynamic Forwarding Filter enabled, specific runtime flag enabled, and Host header modification.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2025-09-03 — PublishedP2026-10-21 (seen by) — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 0.5%2026-09-23: epss 0.5%2026-09-24: epss 0.5%2026-09-25: epss 0.5%2026-09-26: epss 0.5%2026-09-27: epss 0.5%2026-09-29: epss 0.5%2026-09-30: epss 0.5%2026-10-01: epss 0.5%2026-10-02: epss 0.5%2026-10-03: epss 0.5%2026-10-04: epss 0.5%2026-10-05: epss 0.5%2026-10-06: epss 0.5%2026-10-07: epss 0.5%2026-10-08: epss 0.5%2026-10-09: epss 0.5%2026-10-10: epss 0.5%2026-10-11: epss 0.5%2026-10-12: epss 0.5%2026-10-13: epss 0.5%2026-10-14: epss 0.5%2026-10-15: epss 0.5%2026-10-16: epss 0.5%2026-10-18: epss 0.5%2026-10-19: epss 0.5%2026-10-20: epss 0.5%2026-10-21: epss 0.5%0.5%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-416

References 3