Bug 1765655 (CVE-2019-15225)

Summary:	CVE-2019-15225 envoy: crafted request with long URI allows remote attacker to cause denial of service
Product:	[Other] Security Response	Reporter:	kat <kbost>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	rcernich, twalsh
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in Envoy through version 1.11.1. Users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service through memory consumption. The highest threat from this vulnerability is to system availability.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-10-25 09:55:14 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1765656

Description kat 2019-10-25 16:40:03 UTC

A vulnerability was found in Envoy through 1.11.1, where users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.

This description came from: https://nvd.nist.gov/vuln/detail/CVE-2019-15225

Comment 1 Timothy Walsh 2019-11-11 12:17:23 UTC

See related flaw https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14993

Comment 3 Mark Cooper 2020-05-13 01:22:25 UTC

Used FixCVE names as this was released in an RHEA: https://access.redhat.com/errata/RHEA-2020:1416