CVE-2019-18802

An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header such as Host with whitespace after the header content. Envoy will treat "header-value " as a different string from "header-value" so for example with the Host header "example.com " one could bypass...

CVE-2019-18802

CVE-2019-18802 affects Envoy 1.12.0. An untrusted remote client can send an HTTP header (e.g., Host) with trailing whitespace, causing Envoy to treat header-value and header-value as different strings and potentially bypass Host matchers. The linked records (including openSUSE/SUSE advisories) as...

CVE-2019-18801

CVE-2019-18801 affects Envoy 1.12.0 where an untrusted remote client can send HTTP/2 requests that write to the heap outside of request buffers when the upstream is HTTP/1, potentially causing heap corruption (query‑of‑death) or bypassing access controls like path-based routing. The vulnerability...

CVE-2019-18801

An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents leading to a query-of-death scenario or may be used to bypass Envoy's...

CVE-2019-18838: NULL Pointer Dereference

An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host header, it sends an internally generated "Invalid request" response. This internally generated response is dispatched through the configured encoder filter chain before being sent to the client. An...

CVE-2019-18802: Undefined Security Weakness

An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header such as Host with whitespace after the header content. Envoy will treat "header-value " as a different string from "header-value" so for example with the Host header "example.com " one could bypass...

CVE-2019-18801: Out-of-bounds Write

An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents leading to a query-of-death scenario or may be used to bypass Envoy's...

PT-2019-15674 · Envoy +1 · Envoy +1

Name of the Vulnerable Software and Affected Versions: Envoy version 1.12.0 Description: An issue was discovered where an untrusted remote client can send an HTTP header, such as the Host header, with whitespace after the header content. This allows the client to bypass matchers, for example, by...

RHEL 7 / 8 : Red Hat OpenShift Service Mesh 1.0.3 RPMs (RHSA-2019:4222)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4222 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

Denial Of Service (DoS)

servicemesh is vulnerable to denial of service DoS. The vulnerability exists as malformed HTTP request without the Host header may cause abnormal termination of the Envoy process...

envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process

A flaw was found in envoy. A malformed HTTP request without the Host header may cause abnormal termination of the Envoy process. The highest threat from this vulnerability is to system availability...

envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure

A flaw was found in envoy. A malformed request header may cause route matchers or access controls to be bypassed, resulting in escalation of privileges or information disclosure. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

envoy: an untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1

An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents leading to a query-of-death scenario or may be used to bypass Envoy's...

Envoy Buffer Overflow Vulnerability

Envoy is an open source distributed proxy server . A buffer overflow vulnerability exists in Envoy version 1.12.0. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundaries, resulting in incorrect read and write...

Envoy CVE-2019-18801 Heap Buffer Overflow Vulnerability

Description Envoy PHP is prone to a heap-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully exploiting this issue allows attackers to execute arbitrary code in the contex...

Envoy Buffer Overflow Vulnerability (CNVD-2020-01020)

Envoy is an open source distributed proxy server . A buffer overflow vulnerability exists in Envoy version 1.12.0, which can be exploited by an attacker to bypass route matching and elevate privileges or obtain sensitive information on a system...

CVE-2019-18838

A flaw was found in envoy. A malformed HTTP request without the Host header may cause abnormal termination of the Envoy process. The highest threat from this vulnerability is to system availability...

CVE-2019-18801

An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents leading to a query-of-death scenario or may be used to bypass Envoy's...

Envoy Resource Management Error Vulnerability (CNVD-2021-58579)

Envoy is an open source distributed proxy server. version 1.10.0 to 1.11.1 of Envoy contains a resource management error vulnerability, which can be exploited by attackers with specially crafted requests to cause a denial of service consume CPU resources...

envoy:config_fuzz_test: Heap-use-after-free in Envoy::Upstream::ZoneAwareLoadBalancerBase::~ZoneAwareLoadBalancerBase

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6136135336329216 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: configfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...