Lucene search

K
osvGoogleOSV:BIT-ENVOY-2022-21655
HistoryMar 06, 2024 - 10:56 a.m.

BIT-envoy-2022-21655

2024-03-0610:56:14
Google
osv.dev
6
envoy
edge proxy
cloud-native
denial of service
workaround
internal redirects

0.001 Low

EPSS

Percentile

38.9%

Envoy is an open source edge and service proxy, designed for cloud-native applications. The envoy common router will segfault if an internal redirect selects a route configured with direct response or redirect actions. This will result in a denial of service. As a workaround turn off internal redirects if direct response entries are configured on the same listener.

0.001 Low

EPSS

Percentile

38.9%