An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large grpc-timeout value leads to unexpected timeout calculations...
7.5CVSS5.4AI score0.0204EPSS
SaveExploits1References4
OSV•added 2018/07/02 12:0 a.m.•4 views
UBUNTU-CVE-2018-13053
The alarmtimernsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktimeaddsafe is not used...