Description
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs.
Remediation
References
Related Vulnerabilities
MediaWiki Other Vulnerability (CVE-2007-0788)
WordPress Plugin WP smart CRM & Invoices FREE Cross-Site Scripting (1.8.7)
PrestaShop Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-25170)
YOURLS Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2021-3734)
Jenkins Observable Discrepancy Vulnerability (CVE-2022-34174)