Description
In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Service Mesh 1 | ior +1 | 1.1.0-3.el8 | RHEA-2020:1416 |
| Red Hat Service Mesh 1 | kiali | v1.12.7.redhat1-1.el7 | RHEA-2020:1416 |
| Red Hat Service Mesh 1 | servicemesh +8 | 1.1.0-5.el8 | RHEA-2020:1416 |
| Red Hat Service Mesh 1 | servicemesh-grafana +1 | 6.4.3-2.el8 | RHEA-2020:1416 |
| Red Hat Service Mesh 1 | servicemesh-operator | 1.1.0-9.el8 | RHEA-2020:1416 |
| Red Hat Service Mesh 1 | servicemesh-prometheus | 2.14.0-3.el8 | RHEA-2020:1416 |
| Red Hat Service Mesh 1 | servicemesh-proxy | 1.1.0-4.el8 | RHEA-2020:1416 |
Advisories 1
- RHEA-2020:1416 Red Hat Enhancement Advisory: Red Hat OpenShift Service Mesh 1.1.0 RPMs Red Hat Security Advisories (RHSA) · Jun 27, 2026