Home > Vulnerability Database > CVE-2019-18817

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2019-18817

Date: November 12, 2019

Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True, a related issue to CVE-2019-18836.

Language: Go

Severity Score

7.5

Related Resources (8)

Url: https://nvd.nist.gov/vuln/detail/CVE-2019-18817

Url: https://github.com/istio/istio/issues/18229#issuecomment-553190142

Url: https://istio.io/news/2019/announcing-1.3.5/

Url: https://github.com/istio/istio/commit/7570a1f5b56c108aed6ecfa5d2a6048f444bfb37

Url: https://github.com/istio/istio/issues/18229

Url: https://github.com/istio/istio

Url: https://istio.io/news/2019/announcing-1.3.5

Url: https://www.mend.io/vulnerability-database/CVE-2019-18817

Severity Score

7.5

Weakness Type (CWE)

Loop with Unreachable Exit Condition ('Infinite Loop')

CWE-835

CVSS v3.1

Base Score:	7.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	HIGH

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us