TI-2018-14247 CVE-2018-20103 · GHSA-c9xx-94cr-x7xm
An issue was discovered in dns.c in HAProxy through 1.8.14.
Priority MEDIUM 42
An issue was discovered in dns.c in HAProxy through 1.8.14.
RHSA-2019:1436
rh-haproxy18-haproxy security, bug fix, and enhancement update
Released 2019-06-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-haproxy18-haproxy-1.8.17-1.el7, rh-haproxy18-haproxy-syspaths-1.8.17-1.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-haproxy18-haproxy-1.8.17-1.el7, rh-haproxy18-haproxy-syspaths-1.8.17-1.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-haproxy18-haproxy-1.8.17-1.el7, rh-haproxy18-haproxy-syspaths-1.8.17-1.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-haproxy18-haproxy-1.8.17-1.el7, rh-haproxy18-haproxy-syspaths-1.8.17-1.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-haproxy18-haproxy-1.8.17-1.el7, rh-haproxy18-haproxy-syspaths-1.8.17-1.el7
Fixes 3 records
TI-2018-14246 CVE-2018-20102 · GHSA-5m22-hqfx-435p
An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy…
Priority MEDIUM 40
An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14.
TI-2018-08193 CVE-2018-11469 · GHSA-2m5p-jq2g-4fw5
Incorrect caching of responses to requests including an Authorization header in HAProxy…
Priority LOW 32
Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 (if cache enabled) allows attackers to achieve information disclosure via an unauthenticated remote request, rel…