CVE-2020-12605

mediumPriorität · verfolgen · 31EPSS 0.014 · 73. PerzentilDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.45% (73rd) EPSS

CVSS 5 · medium

Is it mine?

18 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · osv · cert_bund

EPSS · bewertet 2026-10-27

Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenservicemesh-proxy-0:1.1.4-2.el8.src as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:2798
Behobenservicemesh-proxy-0:1.1.4-2.el8.x86_64 as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:2798
Behobenservicemesh-proxy-0:1.0.11-1.el8.src as a component of OpenShift Service Mesh 1.0redhat_csaf
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:2864
Behobenservicemesh-proxy-0:1.0.11-1.el8.x86_64 as a component of OpenShift Service Mesh 1.0redhat_csaf
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:2864

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Red Hat Product Security US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-770USprimärCWE-400US

betroffene Produkte (18)

Betroffene Produkte und Versionsbereiche.

IBM App Connect Enterprise Certified Container Operator <12.0.5alle Versionencert_bundDE
IBM App Connect Enterprise Certified Container Operator <12.5.0alle Versionencert_bundDE
Red Hat Enterprise Linuxalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat OpenShift service mesh 1.1alle Versionencert_bundDEcpe:/a:redhat:openshift:service_mesh_1.1
SUSE Linuxalle Versionencert_bundDEcpe:/o:suse:suse_linux:-
IBM App Connect Enterprise≤ Certified Container Operator <12.0.5cert_bundDE
IBM App Connect Enterprise≤ Certified Container Operator <12.5.0cert_bundDE
n/a n/a≤ n/aenisa_euvdEU
envoyproxy envoy≤ 1.12.4nvdUScpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*
envoyproxy envoy= 1.13.2nvdUScpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*
envoyproxy envoy= 1.14.2nvdUScpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*
Bitnami envoy< 1.12.5osvUSpkg:bitnami/envoy
Bitnami envoy1.13.2 → 1.13.3osvUSpkg:bitnami/envoy
Bitnami envoy1.14.2 → 1.14.3osvUSpkg:bitnami/envoy
servicemesh-proxy-0:1.0.11-1.el8.src as a component of OpenShift Service Mesh 1.0alle Versionenfixedredhat_csafUS
servicemesh-proxy-0:1.0.11-1.el8.x86_64 as a component of OpenShift Service Mesh 1.0alle Versionenfixedredhat_csafUS
servicemesh-proxy-0:1.1.4-2.el8.src as a component of OpenShift Service Mesh 1.1alle Versionenfixedredhat_csafUS
servicemesh-proxy-0:1.1.4-2.el8.x86_64 as a component of OpenShift Service Mesh 1.1alle Versionenfixedredhat_csafUS

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2020:2798Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update2020-07-01csaf · redhat_csafUS
An update for servicemesh-proxy is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2020:2864Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0 servicemesh-proxy security update2020-07-07csaf · redhat_csafUS
An update for servicemesh-proxy is now available for OpenShift Service Mesh 1.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
WID-SEC-W-2026-0777Red Hat OpenShift: Mehrere SchwachstellenDeutsch2020-07-01csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen, einen Cross-Site-Scripting-Angriff durchzuführen, beliebigen Programmcode auszuführen, oder Auswirkungen hinsichtlich der Vertraulichkeit, Verfügbarkeit und Integrität zu verursachen.
BIT-envoy-2020-126052024-03-06vendor · osvUS
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd osv cert_bund nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2020-07-01geändert 2026-06-17

verwandt (3,264)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-53521US	—OT kritisch	2.30% (83rd)	KEV	2025-10-15
When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE). Note: Software versions which have reached…
CVE-2022-22963US	critical9.8OT kritisch	99.9% (100th)	KEV	2022-04-01
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a r…
CVE-2020-3569US	high8.6OT kritisch	3.32% (89th)	KEV	2020-09-23
Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immedi…
CVE-2020-3566US	high8.6OT kritisch	3.70% (90th)	KEV	2020-08-29
A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory…
CVE-2023-50387US	high7.5	100.0% (100th)	Exploit	2024-02-14
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more D…

+3259 weitere

Referenzen (15)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan