CVE-2018-14645

5

MEDIUMCVSS v2

Published

September 21, 2018

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.

haproxy/haproxy

GitHubHAProxy Load Balancer's development branch (mirror of git.haproxy.org)

<= 1.8.14NVD

haproxy

NPMHAProxy management and orchestration module

<= 1.8.14NVD

haproxy

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

This gem is intended for use as a HAProxy interface when you need to read statistics or if you like to manage proxies thru Ruby

<= 1.8.14NVD

observing/haproxy

GitHubHAProxy management and orchestration

<= 1.8.14NVD

Security Advisories

CVE-2018-14645

Description

More on this CVE