Critical ELSA-2020-1288 1 CVE

Critical: haproxy security update (Oracle Linux 8)

Published Apr 2, 2020 · Updated Apr 2, 2020

Ecosystem: Oracle Linux

Summary

[1.8.15-6.1]
- - Fix hapack zero byte input causing overwrite (CVE-2020-11100, #1819518)

[1.8.15-6]
- Add gating tests (#1682106)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	haproxy	0:1.8.15-6.el8_1.1

Vulnerabilities 1

Unscored —

CVE-2020-11100 EPSS 62%

In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can …

haproxy haproxy haproxy Debian Ubuntu Alpine

Apr 2, 2020