Envoy Resource Management Error Vulnerability (CNVD-2022-15542)

Envoy is an open source distributed proxy server. Envoy is vulnerable to a resource management error that occurs when configuring “envoy_v3_api_field_extensions.filters.network.tcp_proxy.v3. tunneling_config” crashes and the downstream connection is disconnected while the upstream connection or http/2 stream still exists. There is no workaround for this issue. Users are advised to upgrade. No details of the vulnerability are available at this time.