Database/Container, Kubernetes & orchestration
Envoy: HTTP/2 request writes to the heap outside request buffers when the upstream is HTTP/1
CVE-2019-18801Container, Kubernetes & orchestrationcurated
Impact
HTTP/2 request writes to the heap outside request buffers when the upstream is HTTP/1; potential RCE in the proxy
Who can reach it
Unauthenticated network
What to do
Upgrade Envoy; for a mesh this means restarting every sidecar, which restarts tenant pods
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.