CVE-2020-8661CWE-400denial-of-service

CVE-2020-8661

High · published March 5, 2020

CVSS v3.1
7.5
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01869 · 79.2th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2020-03-05T02:15Z
Affected products (2)
ProductVersionsFixed in
envoyproxy/envoy≤ 1.13.0—
redhat/openshift_service_meshall versions—
References (6)
https://access.redhat.com/errata/RHSA-2020:0734 · [email protected]https://github.com/envoyproxy/envoy/security/advisories/GHSA-36cq-ww7h-p4j7 · [email protected]https://www.envoyproxy.io/docs/envoy/v1.13.1/intro/version_history · [email protected]https://access.redhat.com/errata/RHSA-2020:0734 · af854a3a-2127-422b-91ae-364da2661108https://github.com/envoyproxy/envoy/security/advisories/GHSA-36cq-ww7h-p4j7 · af854a3a-2127-422b-91ae-364da2661108https://www.envoyproxy.io/docs/envoy/v1.13.1/intro/version_history · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 04 MAR 20:48Z
    CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests
    cvelistv5