Denial of Service

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

1. Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the headers stays below a maximum limit. The im…CVE-2019-15226Envoyproxy · 65% likely

   CWE-400

2. In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with…CVE-2019-15225Envoyproxy · 3.4% likely

   CWE-770

3. Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy lo…CVE-2019-18836Envoyproxy · 1.9% likely

   CWE-835

4. CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e. 1 byte) chunks.CVE-2020-8659Envoyproxy · 1.9% likely

   CWE-770

5. CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests.CVE-2020-8661Envoyproxy · 1.9% likely

   CWE-400

6. An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion.CVE-2021-29258Envoyproxy · 1.8% likely

   CWE-617

7. Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does not send enough windo…CVE-2020-12604Envoyproxy · 1.7% likely

   CWE-401

8. Envoy vulnerable to HTTP/2 memory leak in nghttp2 codecCVE-2023-35945envoyproxy · CVSS 7.5 · 1.7% likely

   CWE-400

9. Zip bomb vulnerability in EnvoyCVE-2022-29225envoyproxy · CVSS 7.5 · 1.6% likely

   CWE-409

10. Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when accepting too many connections.CVE-2020-8663Envoyproxy · 1.5% likely

    CWE-400

11. Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs.CVE-2020-12605Envoyproxy · 1.4% likely

    CWE-770

12. Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or responses with many small (i.e. 1 byte) data frames.CVE-2020-12603Envoyproxy · 1.4% likely

    CWE-400

13. Reachable assertion in EnvoyCVE-2022-29228envoyproxy · CVSS 7.5 · 1.3% likely

    CWE-617

14. Excessive CPU utilization when closing HTTP/2 streamsCVE-2021-32778envoyproxy · CVSS 5.8 · 1.2% likely

    CWE-834

15. Crash when a cluster is deleted in EnvoyCVE-2022-23606envoyproxy · CVSS 4.4 · 1.0% likely

    CWE-674

16. Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplificationCVE-2026-47774envoyproxy · CVSS 7.5 · 1.0% likely

    CWE-405

17. Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar headerCVE-2026-53717envoyproxy · CVSS 6.5 · 0.7% likely

    CWE-789

18. Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limitCVE-2026-53716envoyproxy · CVSS 6.5 · 0.7% likely

    CWE-789

19. Envoy may crash when a large request body is processed in Lua filterCVE-2023-27492envoyproxy · CVSS 4.8 · 0.7% likely

    CWE-770

20. Envoy can enter an endless loop while decompressing Brotli data with extra inputCVE-2024-32976envoyproxy · CVSS 7.5 · 0.7% likely

    CWE-835

21. Envoy: HTTP/2 Discarded Host Header 200 GB Header-Copy OOM in EnvoyCVE-2026-73550envoyproxy · CVSS 7.5 · 0.6% likely

    CWE-401

22. Excessive CPU usage when URI template matcher is configured using regex in EnvoyCVE-2024-23323envoyproxy · CVSS 4.3 · 0.5% likely

    CWE-1176

23. Envoy Zstd Decompressor: Ratio Check at Wrong Loop Depth lead to memory explosionCVE-2026-48044envoyproxy · CVSS 7.5 · 0.5% likely

    CWE-409

24. Envoy OOM vector from HTTP async client with unbounded response buffer for mirror responseCVE-2024-34364envoyproxy · CVSS 5.7 · 0.5% likely

    CWE-400

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.