Red Hat Security AdvisoryRHSA-2019:0547
OpenShift Container Platform 3.9 haproxy security update
Released 2019-03-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 3.9 haproxy-1.8.17-3.el7, haproxy18-1.8.17-3.el7
Fixes 2 records
Priority MEDIUM 40
An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04459 · Published 2019-03-18 · Partial fix CWE-125
Priority MEDIUM 40
An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0415 · Published 2018-12-12 · Partial fix CWE-125
