Researchers
Back
Matt Klein
Researcher from
Lyft
#19691
of 60,574
15.8
Total CVSS
Vulnerabilities
·
2
High
2
PT-2020-15892
2020-10-01
8.3
CVE-2020-25017
Envoy
Envoy
The issue arises because Envoy only considers the first value when multiple header values are present for some HTTP headers. Additionally, Envoy's setCopy() header map API does not replace all existing occurrences of a non-inline header.
PT-2020-13163
2020-07-01
7.5
CVE-2020-12604
Envoy
Envoy
The issue arises when an HTTP/2 client requests a large payload but fails to send sufficient window updates to consume the entire stream and does not reset the stream, leading to increased memory usage.