Description

When parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters (NUL, ASCII 0x0). This allows remote attackers crafting header values containing embedded NUL characters to potentially bypass header matching rules, gaining access to unauthorized resources.

Remediation

References

CVE-2019-9900

Related Vulnerabilities

WordPress Plugin simpleSAMLphp Authentication Cross-Site Scripting (0.7.0)

Oracle Database Server Other Vulnerability (CVE-2002-0857)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Privilege Escalation (3.7.1.4)

WordPress Plugin Yandex.News Feed by Teplitsa Cross-Site Scripting (1.12.5)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4083)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2019-9900