cve/2019/CVE-2019-18836.md

CVE-2019-18836

Description

Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_listener_filters_timeout is used."

POC

Reference

• https://github.com/envoyproxy/envoy/security/advisories/GHSA-3xvf-4396-cj46
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-3xvf-4396-cj46

Github

No PoCs found on GitHub currently.