Vulnetix
Try Vulnetix Request Demo
CVE-2019-18801 PUBLISHED CVSS 7.5 HIGH

An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents (leading to a query-of-death scenario) or may be used to bypass Envoy's access control mechanisms such as path based routing. An attacker can also modify requests from other users that happen to be proximal temporally and spatially.

EPSS 0.04% · 13.6th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
0.04%
13.6th percentile

Affected Products

VendorProductVersions
Red HatN/A
Red HatRed Hat Enterprise Linux Server
n/an/an/a
envoyproxyenvoy0
Red HatRed Hat Enterprise Linux

Timeline

References

Open in Interactive Console →