OSV-2019-1

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/envoy/OSV-2019-1.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2019-1
Published
2021-03-29T05:14:39.113684Z
Modified
2022-04-13T03:30:04.042660Z
Summary
ASSERT: bufferRemainingSize() >= length.
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18431

Crash type: ASSERT
Crash state:
bufferRemainingSize() >= length.
Envoy::Http::Http1::ConnectionImpl::copyToBuffer
Envoy::Http::Http1::RequestStreamEncoderImpl::encodeHeaders
References

Affected packages

OSS-Fuzz / envoy

Package

Name
envoy
Purl
pkg:generic/envoy

Affected ranges

Type
GIT
Repo
https://github.com/envoyproxy/envoy.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed
Fixed

Affected versions

v1.*

v1.0.0
v1.1.0
v1.10.0
v1.11.0
v1.12.0
v1.12.1
v1.2.0
v1.3.0
v1.4.0
v1.5.0
v1.6.0
v1.7.0
v1.8.0
v1.9.0

Ecosystem specific

{
    "severity": "HIGH"
}

Database specific

{
    "fixed_range": "61201908c18b71633e4a8393c03978a83faac4d1:58802ba2f503200d93e52a4eb6ac1076e0faa272"
}