cve/2019/CVE-2019-18836.md

### [CVE-2019-18836](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18836)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_listener_filters_timeout is used."

### POC

#### Reference
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-3xvf-4396-cj46
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-3xvf-4396-cj46

#### Github
No PoCs found on GitHub currently.