Design/Logic Flaw

Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or responses with many small i.e. 1 byte data frames...

CVE-2020-12603

CVE-2020-12603 affects Envoy before 1.16.1, where memory may be consumed excessively when proxying HTTP/2 traffic consisting of many small frames (1 byte). Affected versions are 1.14.2, 1.13.2, 1.12.4 or earlier. The issue is documented across multiple sources (e.g., BIT-envoy-2020-12603 and rela...

CVE-2020-12603

Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or responses with many small i.e. 1 byte data frames...

OSV-2020-473 Heap-use-after-free in Envoy::Server::InitManagerImpl::initializeTarget

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13221 Crash type: Heap-use-after-free READ 8 Crash state: Envoy::Server::InitManagerImpl::initializeTarget Envoy::Server::InitManagerImpl::initialize Envoy::Server::ValidationInstance::initialize...

PT-2020-13163 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions 1.14.2, 1.13.2, 1.12.4 or earlier Description: The issue arises when an HTTP/2 client requests a large payload but fails to send sufficient window updates to consume the entire stream and does not reset the stream, leading to...

PT-2020-20256 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions 1.14.2, 1.13.2, 1.12.4 or earlier Description: The issue may cause Envoy to exhaust file descriptors and/or memory when accepting too many connections. Recommendations: For Envoy versions 1.14.2, 1.13.2, 1.12.4 or earlier, upda...

PT-2020-13164 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions 1.14.2, 1.13.2, 1.12.4 or earlier Description: The issue is related to excessive memory consumption when processing HTTP/1.1 headers with long field names or requests with long URLs. Recommendations: For Envoy versions 1.14.2,...

CVE-2020-12604

Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does not send enough window updates to consume the entire stream and does not reset the stream...

CVE-2020-12603

A flaw was found in Envoy in versions through 1.14.1. An excessive amount of memory may be consumed when proxying HTTP/2 requests and responses that contain many small e.g. 1 byte data frames. The highest threat from this vulnerability is to system availability...

CVE-2020-12605

An uncontrolled resource consumption vulnerability was found in Envoy. This flaw allows an attacker to craft many HTTP requests with long field names or URLs to cause the proxy to consume excessive amounts of memory, potentially resulting in a denial of service. The highest threat from this...

CVE-2020-8663

A flaw was found in envoy in versions through 1.14.1. Accepting too many connections may lead to an exhaustion of file descriptors and/or memory. The highest threat from this vulnerability is to system availability...

CVE-2020-11767

Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. If there is a TCP connection negotiated with SNI over HTTPS to .example.com, a request for a domain concurrently configured explicitly e.g., abc.example.com is sent to the servers listening behind .example.com. The outcome shoul...

envoy:codec_impl_fuzz_test: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5176497475420160 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: undefined UBSAN...

The vulnerability of the network programming environments Envoy and Istio lies in their susceptibility to entering an infinite loop when processing certain input data. This allows attackers to cause service failures.

The vulnerability of the network programming environments Envoy and Istio is related to the entry into an infinite loop when certain input data is provided. Exploiting this vulnerability can allow a attacker to cause service failures...

envoy:codec_impl_fuzz_test: Stack-use-after-scope in Envoy::Http::Http1::ConnectionImpl::readDisable

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5716313302630400 Project: envoy Fuzzing Engine: afl Fuzz Target: codecimplfuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address: 0x7f5c31653660...

Regular Expression Denial Of Service (ReDoS)

envoy is vulnerable to regular expression denial of service. A remote attacker is able to cause a denial of service from excessive memory usage via a very long URI...

istio/envoy: crafted packet allows remote attacker to cause denial of service

A null pointer exception flaw was found in servicemesh-proxy. When running Telemetry v2 not on by default in version 1.4.x, an attacker could send a specially crafted packet to the ingress gateway or proxy sidecar, triggering a denial of service...

envoy:codec_impl_fuzz_test: Bad-cast to testing::internal::FunctionMocker<Envoy::Network::Connection::State ()> from testing::internal::UntypedFunctionMockerBase in Envoy::Network::MockConnection::state

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5653835151572992 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe11206980 Crash...

envoy:conn_manager_impl_fuzz_test: Heap-buffer-overflow in Envoy::Fuzz::replaceInvalidHostCharacters

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5630167902060544 Project: envoy Fuzzing Engine: afl Fuzz Target: connmanagerimplfuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Cloud Lookup (and Bypass)

This module can be useful if you need to test the security of your server and your website behind a solution Cloud based. By discovering the origin IP address of the targeted host. More precisely, this module uses multiple data sources in order ViewDNS.info, DNS enumeration and Censys to collect...