CVE-2020-12604

Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does not send enough window updates to consume the entire stream and does not reset the stream.

• CWE-401

• https://github.com/envoyproxy/envoy/commits/masterPatch, Third Party Advisory
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-8hf8-8gvw-ggvxThird Party Advisory
• https://github.com/envoyproxy/envoy/commits/masterPatch, Third Party Advisory
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-8hf8-8gvw-ggvxThird Party Advisory

Published

Jul 1, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12592Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-12593Symantec Endpoint Detection & Response, prior to 4.5, may be…7.5
• CVE-2020-12594A privilege escalation flaw allows a malicious, authenticate…7.2
• CVE-2020-12595An information disclosure flaw allows a malicious, authentic…4.9
• CVE-2020-1260A remote code execution vulnerability exists in the way that…7.5
• CVE-2020-12603Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume …7.5
• CVE-2020-12605Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume …7.5
• CVE-2020-12606An issue was discovered in DB Soft SGLAC before 20.05.001. T…9.8
• CVE-2020-12607An issue was discovered in fastecdsa before 2.1.2. When usin…7.5
• CVE-2020-12608An issue was discovered in SolarWinds MSP PME (Patch Managem…7.8
• CVE-2020-1261An information disclosure vulnerability exists in the way Wi…5.5
• CVE-2020-12612An issue was discovered in BeyondTrust Privilege Management …7.8