Summary
It was discovered that HAProxy incorrectly handled certain requests.
An attacker could possibly use this to expose sensitive information.
(CVE-2018-20102)
It was discovered that HAProxy incorrectly handled certain requests.
A attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10.
(CVE-2018-20103, CVE-2018-20615)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | haproxy | 1.6.3-1ubuntu0.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | haproxy | 1.8.8-1ubuntu0.3 |
Vulnerabilities 3
-
Unscored —
An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due to a missing …
-
Unscored —
An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can t…
-
Unscored —
An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 whic…