ding</code>, <code>QuotaSpecBinding</code>.</p><p><strong>ISTIO-SECURITY-2019-004</strong>: Envoy, and subsequently Istio are vulnerable to a series of trivial HTTP/2-based DoS attacks:
* <strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9512">CVE-2019-9512</a></strong>: HTTP/2 flood using <code>PING</code> frames and queuing of response <code>PING</code> ACK frames that results in unbounded memory growth (which can lead to out of memory conditions).
* <strong><a href="https://cve.mit