CVE-2019-18838

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host header, it sends an internally generated \"Invalid request\" response. This internally generated response is dispatched through the configured encoder filter chain before being sent to the client. An encoder filter that invokes route manager APIs that access a request's Host header causes a NULL pointer dereference, resulting in abnormal termination of the Envoy process."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-12-13T12:22:33.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/envoyproxy/envoy/commits/master"}, {"tags": ["x_refsource_MISC"], "url": "https://groups.google.com/forum/#%21forum/envoy-users"}, {"tags": ["x_refsource_MISC"], "url": "https://blog.envoyproxy.io"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-f2rv-4w6x-rwhc"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-18838", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host header, it sends an internally generated \"Invalid request\" response. This internally generated response is dispatched through the configured encoder filter chain before being sent to the client. An encoder filter that invokes route manager APIs that access a request's Host header causes a NULL pointer dereference, resulting in abnormal termination of the Envoy process."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/envoyproxy/envoy/commits/master", "refsource": "MISC", "url": "https://github.com/envoyproxy/envoy/commits/master"}, {"name": "https://groups.google.com/forum/#!forum/envoy-users", "refsource": "MISC", "url": "https://groups.google.com/forum/#!forum/envoy-users"}, {"name": "https://blog.envoyproxy.io", "refsource": "MISC", "url": "https://blog.envoyproxy.io"}, {"name": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-f2rv-4w6x-rwhc", "refsource": "CONFIRM", "url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-f2rv-4w6x-rwhc"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T02:02:39.849Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/envoyproxy/envoy/commits/master"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://groups.google.com/forum/#%21forum/envoy-users"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://blog.envoyproxy.io"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-f2rv-4w6x-rwhc"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-18838", "datePublished": "2019-12-13T12:22:33.000Z", "dateReserved": "2019-11-08T00:00:00.000Z", "dateUpdated": "2024-08-05T02:02:39.849Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*", "matchCriteriaId": "A9FE9447-DDAB-42A3-827A-DAB57328D902", "versionEndIncluding": "1.12.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host header, it sends an internally generated \"Invalid request\" response. This internally generated response is dispatched through the configured encoder filter chain before being sent to the client. An encoder filter that invokes route manager APIs that access a request's Host header causes a NULL pointer dereference, resulting in abnormal termination of the Envoy process."}, {"lang": "es", "value": "Se detect\u00f3 un problema en Envoy versi\u00f3n 1.12.0. Tras recibir una petici\u00f3n HTTP malformada sin un encabezado Host, se env\u00eda una respuesta \"Invalid request\" generada internamente. Esta respuesta generada internamente es enviada por medio de la cadena de filtro del codificador configurado antes de enviarse al cliente. Un filtro del codificador que invoca las API de administrador de ruta que acceden al encabezado Host de una petici\u00f3n causa una desreferencia del puntero NULL, resultando en la terminaci\u00f3n anormal del proceso de Envoy."}], "id": "CVE-2019-18838", "lastModified": "2026-06-17T02:25:26.567", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-12-13T13:15:11.443", "references": [{"source": "cve@mitre.org", "tags": ["Product"], "url": "https://blog.envoyproxy.io"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "https://github.com/envoyproxy/envoy/commits/master"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-f2rv-4w6x-rwhc"}, {"source": "cve@mitre.org", "url": "https://groups.google.com/forum/#%21forum/envoy-users"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://blog.envoyproxy.io"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/envoyproxy/envoy/commits/master"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-f2rv-4w6x-rwhc"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://groups.google.com/forum/#%21forum/envoy-users"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2019:4222", "cpe": "cpe:/a:redhat:service_mesh:1.0::el7", "package": "kiali-0:v1.0.8.redhat1-1.el7", "product_name": "Openshift Service Mesh 1.0", "release_date": "2019-12-11T00:00:00Z"}, {"advisory": "RHSA-2019:4222", "cpe": "cpe:/a:redhat:service_mesh:1.0::el8", "package": "servicemesh-0:1.0.3-1.el8", "product_name": "OpenShift Service Mesh 1.0", "release_date": "2019-12-11T00:00:00Z"}, {"advisory": "RHSA-2019:4222", "cpe": "cpe:/a:redhat:service_mesh:1.0::el8", "package": "servicemesh-cni-0:1.0.3-1.el8", "product_name": "OpenShift Service Mesh 1.0", "release_date": "2019-12-11T00:00:00Z"}, {"advisory": "RHSA-2019:4222", "cpe": "cpe:/a:redhat:service_mesh:1.0::el8", "package": "servicemesh-grafana-0:6.2.2-25.el8", "product_name": "OpenShift Service Mesh 1.0", "release_date": "2019-12-11T00:00:00Z"}, {"advisory": "RHSA-2019:4222", "cpe": "cpe:/a:redhat:service_mesh:1.0::el8", "package": "servicemesh-operator-0:1.0.3-1.el8", "product_name": "OpenShift Service Mesh 1.0", "release_date": "2019-12-11T00:00:00Z"}, {"advisory": "RHSA-2019:4222", "cpe": "cpe:/a:redhat:service_mesh:1.0::el8", "package": "servicemesh-prometheus-0:2.7.2-26.el8", "product_name": "OpenShift Service Mesh 1.0", "release_date": "2019-12-11T00:00:00Z"}, {"advisory": "RHSA-2019:4222", "cpe": "cpe:/a:redhat:service_mesh:1.0::el8", "package": "servicemesh-proxy-0:1.0.3-1.el8", "product_name": "OpenShift Service Mesh 1.0", "release_date": "2019-12-11T00:00:00Z"}], "bugzilla": {"description": "envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process", "id": "1773449", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1773449"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "verified"}, "cwe": "CWE-358", "details": ["An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host header, it sends an internally generated \"Invalid request\" response. This internally generated response is dispatched through the configured encoder filter chain before being sent to the client. An encoder filter that invokes route manager APIs that access a request's Host header causes a NULL pointer dereference, resulting in abnormal termination of the Envoy process.", "A flaw was found in envoy. A malformed HTTP request without the Host header may cause abnormal termination of the Envoy process. The highest threat from this vulnerability is to system availability."], "name": "CVE-2019-18838", "public_date": "2019-12-10T18:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2019-18838\nhttps://nvd.nist.gov/vuln/detail/CVE-2019-18838\nhttps://github.com/envoyproxy/envoy/security/advisories/GHSA-f2rv-4w6x-rwhc\nhttps://groups.google.com/forum/#!topic/envoy-users/m7z5fGkCzPI"], "threat_severity": "Important"}

{}