CVE-2021-32778

score

<0.1

cvss

5.8

epss

1.2%

published

2021-08-24

kev added

—

first seen

2026-10-21

Envoy versions 1.19.1, 1.18.4, 1.17.4, 1.16.5 contain a denial of service caused by an O(N^2) complexity in resetting HTTP/2 streams, letting attackers cause high CPU utilization when many streams are reset, exploit requires attacker to open and close many HTTP/2 streams.