CVE-2020-8661

HIGH7.5Denial of service

JSON export Create alert

Description

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected products

envoyproxy / envoy1.13.0
RedHat / openshift_service_mesh1.0.9 – 1.0.9

References

MISChttps://www.envoyproxy.io/docs/envoy/v1.13.1/intro/version_history
VENDOR_ADVISORYhttps://github.com/envoyproxy/envoy/security/advisories/GHSA-36cq-ww7h-p4j7
VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2020:0734

Updated 22m ago · 8 sources