CVE-2020-11100

8.8

HIGHCVSS v3

Published

April 2, 2020

CVSS v2

6.5 MEDIUM

Affected

9 projects

Assigned by

MITRE

Severity scale

010

Description

In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.

haproxy/haproxy

GitHubHAProxy Load Balancer's development branch (mirror of git.haproxy.org)

>= 1.8.0, < 2.1.4NVD

haproxy

NPMHAProxy management and orchestration module

>= 1.8.0, < 2.1.4NVD

haproxy

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

This gem is intended for use as a HAProxy interface when you need to read statistics or if you like to manage proxies thru Ruby

>= 1.8.0, < 2.1.4NVD

observing/haproxy

GitHubHAProxy management and orchestration

>= 1.8.0, < 2.1.4NVD

opensuse/leap

Docker HubOfficial openSUSE Leap Images

= 15.1NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 30, = 31NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 30, = 31NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 30, = 31NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 30, = 31NVD

Security Advisories

CVE-2020-11100

Description

More on this CVE