C%3aN%2fI%3aN%2fA%3aH">AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td></tr><tr><td>Affected Releases</td><td>1.5 to 1.5.6<br>1.6 to 1.6.3<br></td></tr></tbody></table><p>Envoy, and subsequently Istio, are vulnerable to four newly discovered vulnerabilities:</p><ul><li><p><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12603">CVE-2020-12603</a></strong>:
By sending a specially crafted packet, an attacker could cause Envoy to consume excessive amounts of memory when proxying HTTP/2 reque