Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Matt Klein

Researcher fromLyft
#19691of 60,574
15.8Total CVSS
Vulnerabilities · 2
High
2
PT-2020-15892
2020-10-01
8.3
CVE-2020-25017
Envoy
Envoy
The issue arises because Envoy only considers the first value when multiple header values are present for some HTTP headers. Additionally, Envoy's setCopy() header map API does not replace all existing occurrences of a non-inline header.
PT-2020-13163
2020-07-01
7.5
CVE-2020-12604
Envoy
Envoy
The issue arises when an HTTP/2 client requests a large payload but fails to send sufficient window updates to consume the entire stream and does not reset the stream, leading to increased memory usage.