Vulnerability Description
Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.
CVSS Score
8.3
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Envoyproxy | Envoy | < 1.12.7 |
References
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-2v25-cjjq-5f4wExploitThird Party Advisory
- https://groups.google.com/forum/#%21forum/envoy-security-announce
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-2v25-cjjq-5f4wExploitThird Party Advisory
- https://groups.google.com/forum/#%21forum/envoy-security-announce
FAQ
What is CVE-2020-25017?
CVE-2020-25017 is a vulnerability with a CVSS score of 8.3 (HIGH). Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-in...
How severe is CVE-2020-25017?
CVE-2020-25017 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-25017?
Check the references section above for vendor advisories and patch information. Affected products include: Envoyproxy Envoy.