← Retour aux CVEs

CVE-2019-18801

CRITICAL

9.8

Description

An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents (leading to a query-of-death scenario) or may be used to bypass Envoy's access control mechanisms such as path based routing. An attacker can also modify requests from other users that happen to be proximal temporally and spatially.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie12/13/2019

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

envoyproxy:envoy

Faiblesses (CWE)

CWE-787

References

https://access.redhat.com/errata/RHSA-2019:4222(cve@mitre.org)

https://blog.envoyproxy.io(cve@mitre.org)

https://github.com/envoyproxy/envoy/commits/master(cve@mitre.org)

https://github.com/envoyproxy/envoy/security/advisories/GHSA-gxvv-x4p2-rppp(cve@mitre.org)

https://groups.google.com/forum/#%21forum/envoy-users(cve@mitre.org)

https://access.redhat.com/errata/RHSA-2019:4222(af854a3a-2127-422b-91ae-364da2661108)

https://blog.envoyproxy.io(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/envoyproxy/envoy/commits/master(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/envoyproxy/envoy/security/advisories/GHSA-gxvv-x4p2-rppp(af854a3a-2127-422b-91ae-364da2661108)

https://groups.google.com/forum/#%21forum/envoy-users(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.