https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:47:07 +0000 https://cve.radiocsirt.org/vuln/certfr-2019-avi-633 certfr-2019-avi-633 https://cve.radiocsirt.org/vuln/certfr-2019-avi-633 https://cve.radiocsirt.org/vuln/cnvd-2020-01014 cnvd-2020-01014 https://cve.radiocsirt.org/vuln/cnvd-2020-01014 https://cve.radiocsirt.org/vuln/euvd-2026-58895 EUVD-2026-58895 https://cve.radiocsirt.org/vuln/euvd-2026-58895 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18801 <p>An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents (leading to a query-of-death scenario) or may be used to bypass Envoy&#39;s access control mechanisms such as path based routing. An attacker can also modify requests from other users that happen to be proximal temporally and spatially.</p> <p>An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents (leading to a query-of-death scenario) or may be used to bypass Envoy&#39;s access control mechanisms such as path based routing. An attacker can also modify requests from other users that happen to be proximal temporally and spatially.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-18801 https://cve.radiocsirt.org/vuln/ghsa-288h-hv2q-fwrv <p>An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents (leading to a query-of-death scenario) or may be used to bypass Envoy&#39;s access control mechanisms such as path based routing. An attacker can also modify requests from other users that happen to be proximal temporally and spatially.</p> <p>An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents (leading to a query-of-death scenario) or may be used to bypass Envoy&#39;s access control mechanisms such as path based routing. An attacker can also modify requests from other users that happen to be proximal temporally and spatially.</p> https://cve.radiocsirt.org/vuln/ghsa-288h-hv2q-fwrv https://cve.radiocsirt.org/vuln/gsd-2019-18801 gsd-2019-18801 https://cve.radiocsirt.org/vuln/gsd-2019-18801 https://cve.radiocsirt.org/vuln/rhsa-2019:4222 <p>envoy: an untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1 envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process</p> <p>envoy: an untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1 envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process</p> https://cve.radiocsirt.org/vuln/rhsa-2019:4222