OSV-2019-1
ASSERT: bufferRemainingSize() >= length.
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18431
Crash type: ASSERT
Crash state:
bufferRemainingSize() >= length.
Envoy::Http::Http1::ConnectionImpl::copyToBuffer
Envoy::Http::Http1::RequestStreamEncoderImpl::encodeHeaders
What each source reports
OSV No score
ASSERT: bufferRemainingSize() >= length.
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18431
Crash type: ASSERT
Crash state:
bufferRemainingSize() >= length.
Envoy::Http::Http1::ConnectionImpl::copyToBuffer
Envoy::Http::Http1::RequestStreamEncoderImpl::encodeHeaders
- Record
OSV-2019-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
envoyOSS-Fuzz |
Listed versions, plus commit ranges v1.0.0v1.1.0v1.10.0v1.11.0v1.12.0 Show 9 moreShow lessv1.12.1v1.2.0v1.3.0v1.4.0v1.5.0v1.6.0v1.7.0v1.8.0v1.9.0 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2019-1 is a vulnerability with no CVSS score yet in envoy, published March 29, 2021. No source lists public exploit code. A source reports a fix.