CVE-2019-18802
First published: Mon Nov 18 2019(Updated: )
An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such as Host) with whitespace after the header content. Envoy will treat "header-value " as a different string from "header-value" so for example with the Host header "example.com " one could bypass "example.com" matchers.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Envoyproxy Envoy | <=1.12.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00034.html
- https://blog.envoyproxy.io
- https://github.com/envoyproxy/envoy/commits/master
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-356m-vhw2-wcm4
- https://groups.google.com/forum/#!forum/envoy-users
- https://groups.google.com/forum/#!topic/envoy-users/m7z5fGkCzPI
- https://access.redhat.com/errata/RHSA-2019:4222
- https://access.redhat.com/security/cve/cve-2019-18802
- https://bugzilla.redhat.com/show_bug.cgi?id=1773447
- https://groups.google.com/forum/#%21forum/envoy-users
Frequently Asked Questions
What is CVE-2019-18802?
CVE-2019-18802 is a vulnerability discovered in Envoy 1.12.0 that allows an untrusted remote client to send an HTTP header with whitespace after the header content.
How can an untrusted remote client exploit CVE-2019-18802?
An untrusted remote client can exploit CVE-2019-18802 by sending an HTTP header with whitespace after the header content, which may result in bypassing certain security measures.
What is the severity of CVE-2019-18802?
The severity of CVE-2019-18802 is critical with a score of 9.8.
How can I fix CVE-2019-18802?
To fix CVE-2019-18802, upgrade to Envoy version 1.12.1 or later.
Where can I find more information about CVE-2019-18802?
You can find more information about CVE-2019-18802 on the Envoy mailing list, GitHub security advisories, and Red Hat security advisories.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-18802
- collector/mitre-cve
- source/MITRE
- vendor/envoyproxy
- canonical/envoyproxy envoy
- version/envoyproxy envoy/1.12.1