CVE-2021-43825

Name of the Vulnerable Software and Affected Versions Envoy (affected versions not specified)

Description The issue arises when Envoy, an open source edge and service proxy, fails to correctly abort the operation when the buffer overflows while a response is being processed by the filter chain. This can result in accessing a freed memory block, causing Envoy to crash and leading to a denial of service. Envoy is designed to track the amount of buffered request and response data and abort the request if the amount of buffered data exceeds the limit by sending 413 or 500 responses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.