Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cluster Discovery Service (CDS) all idle connections established to endpoints in that cluster are disconnected. A recursion was introduced in the procedure of disconnecting idle connections that can lead to stack exhaustion and abnormal process termination when a cluster has a large number of idle connections. This infinite recursion causes Envoy to crash. Users are advised to upgrade.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Envoy | Envoyproxy | 1.20.0 (including) | 1.20.2 (excluding) |
| Envoy | Envoyproxy | 1.21.0 (including) | 1.21.0 (including) |
| OpenShift Service Mesh 2.0 | RedHat | servicemesh-proxy-0:2.0.9-3.el8 | * |
| OpenShift Service Mesh 2.1 | RedHat | servicemesh-proxy-0:2.1.2-4.el8 | * |