CVE:CVE-2020-8659
CNNVD:CNNVD-202003-156
Envoy是一款开源的分布式代理服务器。
Envoy 1.13.0及之前版本中存在资源管理错误漏洞，该漏洞源于在代理带有大量较小分块的HTTP/1.1请求或响应（1字节）时占用了过多的内存。远程攻击者可利用该漏洞导致应用程序崩溃。
solution:Upgrade cncf envoy to a higher version than 1.13.0,and avoid the version (,1.13.0]; Upgrade redhat openshift_service_mesh to a higher version than 1.0,and avoid the version 1.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0