CVE-2020-8663

EUVD-2020-29511
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when accepting too many connections.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
Affected Products (NVD)
VendorProductVersion
envoyproxyenvoy
𝑥
≤ 1.12.4
envoyproxyenvoy
1.13.0 ≤
𝑥
≤ 1.13.2
envoyproxyenvoy
1.14.0 ≤
𝑥
≤ 1.14.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/envoyproxy/envoy/security/advisories/GHSA-v8q7-fq78-4997
https://www.envoyproxy.io/docs/envoy/v1.13.1/intro/version_history
https://github.com/envoyproxy/envoy/security/advisories/GHSA-v8q7-fq78-4997
https://www.envoyproxy.io/docs/envoy/v1.13.1/intro/version_history