Envoy before version 1.18.0, and subsequently Istio before version 1.9.3, contains a remotely exploitable vulnerability where an HTTP2 request with an empty metadata map can cause a crash.
Envoy before version 1.18.0, and subsequently Istio before version 1.9.3, contains a remotely exploitable vulnerability where an HTTP2 request with an empty metadata map can cause a crash.
https://istio.io/latest/news/security/istio-security-2021-003/ https://github.com/envoyproxy/envoy/commit/e7c114224f75571fc64542c4e641a73768e2df71
Vulmon