EUVD-2026-78069
GHSA-h7pq-86h8-rp5x
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Network-reachable via Kubernetes API with low privilege (tenant RBAC); no confidentiality or integrity impact; full availability loss via unrecoverable OOM.
Primary rating from Vendor (https://github.com/envoyproxy/gateway).
CVSS VectorVendor: https://github.com/envoyproxy/gateway
Lifecycle Timeline
2DescriptionCVE.org
Vulnerability report without repro case. Repro case may be added later after harness is complete.
Preconditions (4):
- Tenant can create EnvoyExtensionPolicy (baseline)
- Controller has egress to attacker-controlled OCI registry
- No registry allowlist (none exists in code)
- Layer presents Docker/OCI media type
Description
At imagefetcher.go:287, make([]byte, h.Size) uses the attacker-controlled tar-header size; the LimitReader at :278 bounds bytes read from the stream but not the header-declared size returned by tr.Next() (a 512-byte header can claim a multi-TB entry via PAX/GNU encoding). Reached from untrusted tenant input via EnvoyExtensionPolicy spec.wasm[].code.image.url (envoyextensionpolicy.go:1157 → cache.go:262/299 → imagefetcher.go:218 → :287), and the allocation happens for every tar entry regardless of filename. The resulting Go runtime OOM throw is unrecoverable and, because the CRD persists, crash-loops the shared controller - single-request, non-volumetric, cluster-wide DoS.
AnalysisAI
Uncontrolled memory allocation in Envoy Gateway's OCI image fetcher allows a low-privileged tenant to crash-loop the shared controller cluster-wide. Versions before 1.7.4 and in the 1.8.x pre-release range before 1.8.1 are affected. By submitting an EnvoyExtensionPolicy referencing a malicious OCI registry serving a tar layer with a PAX/GNU-encoded multi-terabyte header size, an attacker triggers an unrecoverable Go runtime OOM in the controller - a single-request, non-volumetric, persistent denial of service that persists across restarts until the CRD is manually deleted. No public exploit identified at time of analysis.
Technical ContextAI
Envoy Gateway (pkg:go/github.com/envoyproxy/gateway) is a Kubernetes-native control plane that implements the Gateway API and manages Envoy proxy configuration, including support for WebAssembly extensions via EnvoyExtensionPolicy CRDs. The vulnerable code path in imagefetcher.go:287 performs make([]byte, h.Size) where h.Size comes directly from a tar archive header returned by tr.Next(). OCI image layers are tar archives; the PAX and GNU tar extensions allow a 512-byte on-wire header to encode arbitrary 64-bit size values, including multi-terabyte claims. While a LimitReader at line 278 correctly bounds the number of bytes actually read from the network stream, it does not constrain the integer value returned in the header struct itself, so the allocation is attempted with the full attacker-supplied size before any data is read. CWE-789 (Uncontrolled Memory Allocation) is the precise root cause - the allocation operand is derived entirely from an untrusted external source with no upper-bound validation. The call chain is: EnvoyExtensionPolicy spec.wasm[].code.image.url → envoyextensionpolicy.go:1157 → cache.go:262/299 → imagefetcher.go:218 → imagefetcher.go:287.
RemediationAI
Upgrade Envoy Gateway to version 1.8.1 (for deployments on the 1.8.x line) or 1.7.4 (for deployments on the 1.7.x line), per the vendor advisory at https://github.com/envoyproxy/gateway/security/advisories/GHSA-h7pq-86h8-rp5x. If immediate upgrade is not possible, restrict RBAC so that only fully trusted, operator-class principals can create or modify EnvoyExtensionPolicy resources - this eliminates the ability of untrusted tenants to point the controller at arbitrary OCI registries, though it reduces self-service capability for tenants. As a complementary control, apply Kubernetes NetworkPolicy or an external egress firewall to restrict the controller pod's outbound connections to known-good, internally-managed OCI registries; note that no registry allowlist exists in the application code itself, so enforcement must be done at the infrastructure layer. Critically, any malicious EnvoyExtensionPolicy CRD that has already been applied must be identified and deleted to break the crash loop, even after the controller is patched and restarted.
An issue was discovered in Appsmith before 1.52. Rated critical severity (CVSS 9.8), this vulnerability is remotely expl
runc through version 1.0-rc6 (used in Docker before 18.09.2) contains a container escape vulnerability that allows attac
Netmaker makes networks with WireGuard. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no a
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
The News & Blog Designer Pack - WordPress Blog Plugin - (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post
Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the inten
Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build
Remote code execution in Gogs through 0.14.2 allows authenticated users (and unauthenticated attackers on default-config
Remote code execution in Flowise before 3.1.2 allows any authenticated user (or API caller with chatflow view/update per
Remote code execution in NocoBase Workflow Script Node (npm @nocobase/plugin-workflow-javascript) allows authenticated l
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-c
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 2
Same technique Denial Of Service
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today