CVE-2020-8659: Debian Linux

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e. 1 byte) chunks.

Affected products

• Debian Debian Linux: version 9.0 only
• Envoyproxy Envoy: up to and including 1.13.0
• Red Hat Openshift Service Mesh: version 1.0 only

Published 2020-03-04. Last modified 2026-10-02.