Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-12605
7.5
HIGHCVSS v3
Published
July 1, 2020
CVSS v2
5 MEDIUM
Affected
9 projects
Assigned by
MITRE
Severity scale
010
Description
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs.
envoyproxy/envoy
GitHubCloud-native high-performance edge/middle/service proxy
GitHubCloud-native high-performance edge/middle/service proxy= 1.14.2, = 1.13.2, <= 1.12.4NVD
istio/envoyGitHubFork of Envoy used for testing and tinkering as part of the Istio dev process
GitHubFork of Envoy used for testing and tinkering as part of the Istio dev process= 1.14.2, = 1.13.2, <= 1.12.4NVD
envoy
Python Package Index
NuGet Gallery
Crates.io
NPM
RubyGems