Excessive CPU usage when URI template matcher is configured using regex
Package
Envoy Proxy
(Envoy)
Affected versions
<1.29.1
Patched versions
1.29.1, 1.28.1, 1.27.3, 1.26.7
Description
Credits
-
pmerrison Coordinator
-
phlax Coordinator
-
pradeepcrao Remediation developer
Summary
The regex expression is compiled for every request and can result in high CPU usage and increased request latency when multiple routes are configured with such matchers.
Impact
Denial of Service due to CPU exhaustion.