Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-8659

Fixed in a distro release EPSS 2%

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e. 1 byte) chunks.

Published 2020-03-04 · CVE record · OSV

Products: envoyproxy envoy, redhat openshift_service_mesh, debian_linux

Distro releases

ReleasePackageFixed in
Red Hat service mesh 1.0servicemesh-proxy0:1.0.9-2.el8