CVE-2019-18836

7.5

HIGHCVSS v3

Published

November 11, 2019

CVSS v2

5 MEDIUM

Affected

10 projects

Assigned by

MITRE

Severity scale

010

Description

Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_listener_filters_timeout is used."

istio/istio

GitHubConnect, secure, control, and observe services.

>= 1.3.0, <= 1.3.3NVD

envoyproxy/envoy

GitHubCloud-native high-performance edge/middle/service proxy

= 1.12.0NVD

istio/envoy

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Fork of Envoy used for testing and tinkering as part of the Istio dev process

= 1.12.0NVD

envoy

Python Package IndexSimple API for running external processes.

= 1.12.0NVD

Envoy

NuGet GalleryWith the mediator pattern, communication between objects is encapsulated within a mediator object. Objects no longer communicate directly with each other, but instead communicate through the mediator. This reduces the dependencies between communicating objects, thereby reducing coupling.

= 1.12.0NVD