Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the streamSectionTrackers map of QpackEncoder, populated by encodeHeaders, which keeps a queue and dynamic-table index tracker for every encoded field section that references the...

OSV-2019-1 ASSERT: bufferRemainingSize() >= length.

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18431 Crash type: ASSERT Crash state: bufferRemainingSize = length. Envoy::Http::Http1::ConnectionImpl::copyToBuffer Envoy::Http::Http1::RequestStreamEncoderImpl::encodeHeaders...

PT-2021-27645

Name of the Vulnerable Software and Affected Versions: Envoy affected versions not specified Description: The issue is related to a crash in Envoy, specifically in the Envoy::Http::Http1::ConnectionImpl::copyToBuffer and Envoy::Http::Http1::RequestStreamEncoderImpl::encodeHeaders functions. The...