Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does not send enough window updates to consume the entire stream and does not reset the stream.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0065-1 advisory.

  - Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying     HTTP/2 requests or responses with many small (i.e. 1 byte) data frames. (CVE-2020-12603)

  - Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where     an HTTP/2 client requests a large payload but does not send enough window updates to consume the entire     stream and does not reset the stream. (CVE-2020-12604)

  - Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing     HTTP/1.1 headers with long field names or requests with long URLs. (CVE-2020-12605)

  - Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault     for a UDP packet size larger than 1500. (CVE-2020-35471)

  - Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when accepting     too many connections. (CVE-2020-8663)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the envoy package has been released.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2864 advisory.

    Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for     installation into an on-premise OpenShift Container Platform installation.

    Security Fix(es):

    * envoy: Resource exhaustion when accepting too many connections (CVE-2020-8663)

    * envoy: Resource exhaustion when proxying HTTP/2 requests or responses with small data frames     (CVE-2020-12603)

    * envoy: Resource exhaustion when processing HTTP/1.1 headers with long field names (CVE-2020-12605)

    * envoy: Resource exhaustion via HTTP/2 client requests with large payloads and improper stream windows     (CVE-2020-12604)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2798 advisory.

    Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for     installation into an on-premise OpenShift Container Platform installation.

    Security Fix(es):

    * envoy: Resource exhaustion when accepting too many connections (CVE-2020-8663)

    * envoy: Resource exhaustion when proxying HTTP/2 requests or responses with small data frames     (CVE-2020-12603)

    * envoy: Resource exhaustion when processing HTTP/1.1 headers with long field names (CVE-2020-12605)

    * envoy: Resource exhaustion via HTTP/2 client requests with large payloads and improper stream windows     (CVE-2020-12604)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
158575	openSUSE 15 Security Update : envoy-proxy (openSUSE-SU-2022:0065-1)	Nessus	SuSE Local Security Checks	high
139053	Photon OS 2.0: Envoy PHSA-2020-2.0-0265	Nessus	PhotonOS Local Security Checks	high
139048	Photon OS 1.0: Envoy PHSA-2020-1.0-0309	Nessus	PhotonOS Local Security Checks	high
138185	RHEL 8 : Red Hat OpenShift Service Mesh 1.0 servicemesh-proxy (RHSA-2020:2864)	Nessus	Red Hat Local Security Checks	high
138030	RHEL 8 : Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy (RHSA-2020:2798)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2020-12604

high

Tenable Plugins

high

high

high

high

high