CVE-2019-14993
published 2019-08-13CVE-2019-14993: Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService…
PriorityP337high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
2.23%
80.6th percentile
Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| envoyproxy | envoy | <= 1.11.1 | — |
| istio.io | istio | >= 0 < 1.1.13 | 1.1.13 |
| istio.io | istio | >= 1.2.0 < 1.2.4 | 1.2.4 |
| istio | istio | < 1.1.13 | 1.1.13 |
| istio | istio | >= 1.2.0 < 1.2.4 | 1.2.4 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Istio ReDoS Vulnerability
osv·2022-05-24
CVE-2019-14993 [HIGH] Istio ReDoS Vulnerability
Istio ReDoS Vulnerability
Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API.
GHSA
GHSA-fgr2-cr98-vm44: In Envoy through 1
ghsa_unreviewed·2022-05-24·CVSS 7.5
CVE-2019-15225 [HIGH] CWE-770 GHSA-fgr2-cr98-vm44: In Envoy through 1
In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.
GHSA
Istio ReDoS Vulnerability
ghsa·2022-05-24
CVE-2019-14993 [HIGH] CWE-185 Istio ReDoS Vulnerability
Istio ReDoS Vulnerability
Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API.
Red Hat
istio/envoy: mishandling regular expressions for long URIs leading to DoS
vendor_redhat·2019-10-09·CVSS 7.5
CVE-2019-14993 [HIGH] CWE-185 istio/envoy: mishandling regular expressions for long URIs leading to DoS
istio/envoy: mishandling regular expressions for long URIs leading to DoS
Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API.
A flaw was found in Istio in versions prior to 1.1.13 and 1.2.4. Regular expressions for long URIs are mishandled leading to a denial of service during the use of JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API. The highest threat from this vulnerability is to system availability.
Red Hat
envoy: crafted request with long URI allows remote attacker to cause denial of service
vendor_redhat·2019-08-19·CVSS 7.5
CVE-2019-15225 [HIGH] CWE-400 envoy: crafted request with long URI allows remote attacker to cause denial of service
envoy: crafted request with long URI allows remote attacker to cause denial of service
In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.
A flaw was found in Envoy through version 1.11.1. Users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service through memory consumption. The highest threat from this vulnerability is to system availability.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2019-15225 envoy: crafted request with long URI allows remote attacker to cause denial of service
bugzilla·2019-10-25·CVSS 7.5
CVE-2019-15225 [HIGH] CVE-2019-15225 envoy: crafted request with long URI allows remote attacker to cause denial of service
CVE-2019-15225 envoy: crafted request with long URI allows remote attacker to cause denial of service
A vulnerability was found in Envoy through 1.11.1, where users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.
This description came from: https://nvd.nist.gov/vuln/detail/CVE-2019-15225
Discussion:
See related flaw https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14993
---
Used FixCVE names as this was released in an RHEA: https://access.redhat.com/errata/RHEA-2020:1416
Bugzilla
CVE-2019-14993 istio/envoy: mishandling regular expressions for long URIs leading to DoS
bugzilla·2019-10-09·CVSS 7.5
CVE-2019-14993 [HIGH] CVE-2019-14993 istio/envoy: mishandling regular expressions for long URIs leading to DoS
CVE-2019-14993 istio/envoy: mishandling regular expressions for long URIs leading to DoS
Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API.
Upstream Issue:
https://github.com/envoyproxy/envoy/issues/7728
References:
https://istio.io/news/2019/istio-security-003-004/
Discussion:
External References:
https://istio.io/news/2019/istio-security-003-004/
---
Used FixCVE names as this was released in an RHEA: https://access.redhat.com/errata/RHEA-2020:1416
https://discuss.istio.io/t/upcoming-security-updates-in-istio-1-2-4-and-1-1-13/3383https://gcc.gnu.org/bugzilla/show_bug.cgi?id=86164https://github.com/envoyproxy/envoy/issues/7728https://istio.io/blog/2019/istio-security-003-004/https://discuss.istio.io/t/upcoming-security-updates-in-istio-1-2-4-and-1-1-13/3383https://gcc.gnu.org/bugzilla/show_bug.cgi?id=86164https://github.com/envoyproxy/envoy/issues/7728https://istio.io/blog/2019/istio-security-003-004/
2019-08-13
Published