Red Hat Security Advisory

RHSA-2020:1725

haproxy security, bug fix, and enhancement update

Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) haproxy-1.8.23-3.el8

Fixes 2 records

TI-2019-13942 CVE-2019-19330 · GHSA-x4px-pm9c-vmjm

The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by…

MEDIUM 49

The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulatio…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04032 Published 2019-11-27 Fixed CWE-74

TI-2019-13285 CVE-2019-18277 · GHSA-7r84-r685-grmg

A flaw was found in HAProxy before 2.0.6.

MEDIUM 45

A flaw was found in HAProxy before 2.0.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10068 Published 2019-10-23 Partial fix CWE-444