{"id":"CVE-2019-15225","aliases":["EUVD-2019-6237","GHSA-fgr2-cr98-vm44","RHEA-2020:1416"],"status":"published","title":"In Envoy through 1.11.1, users may configure a route to match incoming path headers via the...","description":"In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03417,"percentile":0.88975,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-770"],"published":"2019-08-19T22:57:58Z","modified":"2026-10-20T10:50:47Z","affected":[{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el7","package":"kiali","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:v1.12.7.redhat1-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"ior","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-citadel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-galley","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-grafana-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-istioctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-mixc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-mixs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-operator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-9.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-pilot-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-pilot-discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-sidecar-injector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8"}]}],"bundled":2}],"products":[{"vendor":"envoyproxy","product":"envoy"}],"references":[{"url":"https://github.com/envoyproxy/envoy/issues/7728","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15225","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fgr2-cr98-vm44"},{"url":"https://access.redhat.com/errata/RHEA-2020:1416","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/MAISTRA-907","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhea-2020_1416.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1759816","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14993","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14993","tags":["advisory"]},{"url":"https://istio.io/news/2019/istio-security-003-004/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15225","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-15225","description":"In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.","status":"published","published":"2019-08-19T22:57:58Z","modified":"2024-08-05T00:42:01.315Z","updated_at":"2026-11-02T14:20:21.397307Z"}],"euvd":[{"id":"EUVD-2019-6237","description":"In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.","status":"published","published":"2019-08-19T22:57:58Z","modified":"2024-08-05T00:42:01Z","updated_at":"2026-11-03T02:40:37.184704Z"}],"ghsa":[{"id":"GHSA-fgr2-cr98-vm44","title":"In Envoy through 1.11.1, users may configure a route to match incoming path headers via the...","description":"In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.","status":"published","published":"2022-05-24T16:53:58Z","modified":"2024-04-04T01:42:25Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:56:01.740944Z"}],"nvd":[{"id":"CVE-2019-15225","description":"In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.","status":"published","published":"2019-08-19T23:15:10.68Z","modified":"2026-06-17T02:19:53.337Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:05:22.878504Z"}],"osv":[{"id":"CVE-2019-15225","description":"In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.","status":"published","published":"2019-08-19T23:15:10.68Z","modified":"2026-10-20T10:50:47.696780883Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.361782Z"},{"id":"RHEA-2020:1416","title":"Red Hat Enhancement Advisory: Red Hat OpenShift Service Mesh 1.1.0 RPMs","status":"published","published":"2024-09-16T03:50:50Z","modified":"2026-06-27T10:08:55Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"}]}}