CVE-2019-18836

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2019-18836

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-18836.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-18836

Aliases

GHSA-3xvf-4396-cj46

Published

2019-11-11T01:15:10.210Z

Modified

2026-07-09T01:31:41.788137Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continueonlistenerfilterstimeout is used."

References

Affected packages

Git / github.com/envoyproxy/envoy

Affected ranges

Type

GIT

Repo

https://github.com/envoyproxy/envoy

Events

Introduced

ab30cafa0c033f8ef77c54dd98badea62b78506e

Last affected

ab30cafa0c033f8ef77c54dd98badea62b78506e

Database specific

{
    "cpe": "cpe:2.3:a:envoyproxy:envoy:1.12.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.12.0"
        },
        {
            "last_affected": "1.12.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*

1.12.0

v1.*

v1.12.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-18836.json"

Git / github.com/istio/istio

Affected ranges

Type

GIT

Repo

https://github.com/istio/istio

Events

Introduced

c2bd59595ce699b31d0f931885f023028ff7902b

Last affected

3cfabd9b36bcf9b5af3c390982772e8f1e798618

Database specific

{
    "cpe": "cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.3.0"
        },
        {
            "last_affected": "1.3.3"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

1.*

1.3.0

1.3.1

1.3.2

1.3.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-18836.json"