CVE-2020-12605

Description

Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs.

References

https://github.com/envoyproxy/envoy/security/advisories/GHSA-fjxc-jj43-f777

https://github.com/envoyproxy/envoy-setec/issues/137

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3