Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Envoy Proxy NULL Pointer Dereference Vulnerability - CVE-2019-18838 - Vulnerability Database
Envoy Proxy

Envoy Proxy NULL Pointer Dereference Vulnerability - CVE-2019-18838

High
Reference: CVE-2019-18838
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-18838
Title: Envoy Proxy NULL Pointer Dereference Vulnerability
Overview:

An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host header it sends an internally generated quotInvalid requestquot response. This internally generated response is dispatched through the configured encoder filter chain before being sent to the client. An encoder filter that invokes route manager APIs that access a request39s Host header causes a NULL pointer dereference resulting in abnormal termination of the Envoy process.