CVE-2020-8659: High severity CNCF Envoy vulnerability
A vulnerability was found in Envoy version 1.13.0 or earlier may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e. 1 byte) chunks.
Other sources
CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e. 1 byte) chunks.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/envoyto a version that resolves this vulnerability.Fixed in 1.13.1
Event History
Frequently Asked Questions
What is CVE-2020-8659?
CVE-2020-8659 is a vulnerability in CNCF Envoy through 1.13.0 that may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small chunks.
What is the severity of CVE-2020-8659?
CVE-2020-8659 has a severity rating of 7.5 (High).
Which software versions are affected by CVE-2020-8659?
CNCF Envoy versions up to and including 1.13.0 and Redhat Openshift Service Mesh 1.0 are affected by CVE-2020-8659.
How can I fix CVE-2020-8659?
To fix CVE-2020-8659, upgrade CNCF Envoy to version 1.13.1 or later.
Where can I find more information about CVE-2020-8659?
You can find more information about CVE-2020-8659 at the following references: [Link1](https://access.redhat.com/errata/RHSA-2020:0734), [Link2](https://github.com/envoyproxy/envoy/security/advisories/GHSA-jwcm-4pwp-c2qv), [Link3](https://lists.debian.org/debian-lts-announce/2022/05/msg00025.html).