Related Vulnerabilities: CVE-2021-32778  

Envoy, as used by Istio before version 1.11.1, contains a remotely exploitable vulnerability where an Envoy client opening and then resetting a large number of HTTP/2 requests could lead to excessive CPU consumption.

Severity High

Remote Yes

Type Denial of service

Description

Envoy, as used by Istio before version 1.11.1, contains a remotely exploitable vulnerability where an Envoy client opening and then resetting a large number of HTTP/2 requests could lead to excessive CPU consumption.

AVG-2321 istio 1.11.0-1 High Vulnerable

https://istio.io/latest/news/security/istio-security-2021-008/#cve-2021-32778