Red Hat Security Advisory

RHSA-2019:0548

OpenShift Container Platform 3.10 haproxy security update

Released 2019-03-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.10 haproxy-1.8.17-3.el7, haproxy18-1.8.17-3.el7

TI-2018-14636 CVE-2018-20615 · GHSA-w4g5-v736-j48g

MEDIUM 40

An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04459 Published 2019-03-18 Partial fix CWE-125