&rsquo;s policy either for information disclosure or escalation of privileges.</p></li><li><p><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18838">CVE-2019-18838</a></strong>: Upon receipt of a malformed HTTP request without the &ldquo;Host&rdquo; header, an encoder filter invoking Envoy&rsquo;s route manager APIs that access request&rsquo;s &ldquo;Host&rdquo; header will cause a NULL pointer to be dereferenced and result in abnormal termination of the Envoy process.</p></li></ul>