CVE-2020-12604

Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does…

published July 1, 2020

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does not send enough window updates to consume the entire stream and does not reset the stream.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01703 · 77.1th percentile
Published
2020-07-01T14:24Z
EPSS history
Timeline
  • 01 JUL 14:24Z
    Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does…
    cvelistv5