PT-2021-27645
Published
2021-03-29
·
Updated
2021-03-29
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions:
Envoy (affected versions not specified)
Description:
The issue is related to a crash in Envoy, specifically in the
Envoy::Http::Http1::ConnectionImpl::copyToBuffer and Envoy::Http::Http1::RequestStreamEncoderImpl::encodeHeaders functions. The crash occurs due to an assertion failure when bufferRemainingSize() is less than length.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾