High severity7.5NVD Advisory· Published Nov 11, 2019· Updated Jun 17, 2026

CVE-2019-18836

Description

Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_listener_filters_timeout is used."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Envoyproxy/Envoy
cpe:2.3:a:envoyproxy:envoy:1.12.0:*:*:*:*:*:*:*
Istio/Istio
cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*
Range: >=1.3.0,<=1.3.3
Envoy/Envoydescription
Envoy/envoyllm-fuzzy
Range: <1.12.0

Patches

Vulnerability mechanics

References

github.com/envoyproxy/envoy/security/advisories/GHSA-3xvf-4396-cj46nvdExploitThird Party Advisory
github.com/istio/istio/issues/18229nvdExploitThird Party Advisory
blog.envoyproxy.ionvdVendor Advisory
groups.google.com/forum/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000