Lucene search

MitreCVE-2019-15226

HistoryOct 09, 2019 - 4:15 p.m.

CVE-2019-15226

2019-10-0916:15:14

CWE-400

mitre

web.nvd.nist.gov

envoy

request headers

denial-of-service

cve-2019-15226

security vulnerability

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.005

Percentile

75.8%

JSON

Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the headers stays below a maximum limit. The implementation in versions 1.10.0 through 1.11.1 for HTTP/1.x traffic and all versions of Envoy for HTTP/2 traffic had O(n^2) performance characteristics. A remote attacker may craft a request that stays below the maximum request header size but consists of many thousands of small headers to consume CPU and result in a denial-of-service attack.

Affected configurations

Nvd

Node

envoyproxyenvoyMatch1.0.0

envoyproxyenvoyMatch1.1.0

envoyproxyenvoyMatch1.2.0

envoyproxyenvoyMatch1.3.0

envoyproxyenvoyMatch1.4.0

envoyproxyenvoyMatch1.5.0

envoyproxyenvoyMatch1.6.0

envoyproxyenvoyMatch1.7.0

envoyproxyenvoyMatch1.7.1

envoyproxyenvoyMatch1.8.0

envoyproxyenvoyMatch1.9.0

envoyproxyenvoyMatch1.9.1

envoyproxyenvoyMatch1.10.0

envoyproxyenvoyMatch1.11.0

envoyproxyenvoyMatch1.11.1

envoyproxyenvoyMatch1.11.2

VendorProductVersionCPE
envoyproxyenvoy1.11.1cpe:/a:envoyproxy:envoy:1.11.1:::
envoyproxyenvoy1.9.1cpe:/a:envoyproxy:envoy:1.9.1:::
envoyproxyenvoy1.6.0cpe:/a:envoyproxy:envoy:1.6.0:::
envoyproxyenvoy1.11.2cpe:/a:envoyproxy:envoy:1.11.2:::
envoyproxyenvoy1.2.0cpe:/a:envoyproxy:envoy:1.2.0:::
envoyproxyenvoy1.3.0cpe:/a:envoyproxy:envoy:1.3.0:::
envoyproxyenvoy1.7.0cpe:/a:envoyproxy:envoy:1.7.0:::
envoyproxyenvoy1.1.0cpe:/a:envoyproxy:envoy:1.1.0:::
envoyproxyenvoy1.4.0cpe:/a:envoyproxy:envoy:1.4.0:::
envoyproxyenvoy1.10.0cpe:/a:envoyproxy:envoy:1.10.0:::

Vendor	Product	Version	CPE
envoyproxy	envoy	1.11.1	cpe:/a:envoyproxy:envoy:1.11.1:::
envoyproxy	envoy	1.9.1	cpe:/a:envoyproxy:envoy:1.9.1:::
envoyproxy	envoy	1.6.0	cpe:/a:envoyproxy:envoy:1.6.0:::
envoyproxy	envoy	1.11.2	cpe:/a:envoyproxy:envoy:1.11.2:::
envoyproxy	envoy	1.2.0	cpe:/a:envoyproxy:envoy:1.2.0:::
envoyproxy	envoy	1.3.0	cpe:/a:envoyproxy:envoy:1.3.0:::
envoyproxy	envoy	1.7.0	cpe:/a:envoyproxy:envoy:1.7.0:::
envoyproxy	envoy	1.1.0	cpe:/a:envoyproxy:envoy:1.1.0:::
envoyproxy	envoy	1.4.0	cpe:/a:envoyproxy:envoy:1.4.0:::
envoyproxy	envoy	1.10.0	cpe:/a:envoyproxy:envoy:1.10.0:::

Rows per page:

1-10 of 161

References

github.com/envoyproxy/envoy/commit/afc39bea36fd436e54262f150c009e8d72db5014

github.com/envoyproxy/envoy/commits/master

github.com/envoyproxy/envoy/issues/8520

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.005

Percentile

75.8%

JSON

Related for CVE-2019-15226