Denial Of Service (DoS)

github.com/envoyproxy/envoy is vulnerable to Denial Of Service (DoS) attacks. When the library receives RST_STREAM and GOAWAY frames from an upstream server, it might leak header maps and bookkeeping structures. The de-allocation of the accounting structure and compressed header is skipped during the cleanup of open requests. The error return code path is used if the connection has previously been flagged to prevent further requests owing to a GOAWAY frame. The return statement is followed immediately by the clean-up code, which results in a memory leak.