CVE-2019-18801: envoyproxy envoy Out-of-bounds Write
Vulnerability summary
CVE-2019-18801 is a critical (CVSS 9.8) Out-of-bounds Write vulnerability in envoyproxy envoy. EPSS estimates a 2.50% chance of exploitation in the next 30 days, higher than 84.5% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 13-12-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents (leading to a query-of-death scenario) or may be used to bypass Envoy's access control mechanisms such as path based routing. An attacker can also modify requests from other users that happen to be proximal temporally and spatially.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.50%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.50% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundEnvoy
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Envoyproxy1 product
- envoy≤ 1.12.1
1 vendor · 1 product
References
5 links- groups.google.com/forum/X Refsource MISC
- github.com/envoyproxy/envoy/security/advisories/GHSA-gxvv-x4p2-rpppX Refsource CONFIRMExploitThird Party Advisory