CVE:CVE-2020-8661
CNNVD:CNNVD-202003-157
Envoy是一款开源的分布式代理服务器。
Envoy 1.13.0及之前版本中存在资源管理错误漏洞。远程攻击者可利用该漏洞消耗大量内存，导致应用程序崩溃。
solution:Upgrade cncf envoy to a higher version than 1.13.0,and avoid the version (,1.13.0]; Upgrade redhat openshift_service_mesh to a higher version than 1.0.9,and avoid the version 1.0.9