Red Hat Security AdvisoryRHSA-2020:1290
rh-haproxy18-haproxy security update
Released 2020-04-02 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-haproxy18-haproxy-1.8.17-1.el7.1, rh-haproxy18-haproxy-syspaths-1.8.17-1.el7.1
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-haproxy18-haproxy-1.8.17-1.el7.1, rh-haproxy18-haproxy-syspaths-1.8.17-1.el7.1
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-haproxy18-haproxy-1.8.17-1.el7.1, rh-haproxy18-haproxy-syspaths-1.8.17-1.el7.1
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-haproxy18-haproxy-1.8.17-1.el7.1, rh-haproxy18-haproxy-syspaths-1.8.17-1.el7.1
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-haproxy18-haproxy-1.8.17-1.el7.1, rh-haproxy18-haproxy-syspaths-1.8.17-1.el7.1
Fixes 1 record
Priority HIGH 73
In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly ca…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.61593 · Published 2020-04-02 · Fixed CWE-787
