Unscored USN-4321-1 1 CVE

haproxy vulnerability

Published Apr 7, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Felix Wilhelm discovered that HAProxy incorrectly handled certain HTTP/2 requests.
An attacker could possibly use this to execute arbitrary code.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	haproxy	1.8.8-1ubuntu0.10

Vulnerabilities 1

Unscored —

CVE-2020-11100 EPSS 62%

In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can …

haproxy haproxy haproxy Debian Ubuntu Alpine

Apr 2, 2020

References

report
https://ubuntu.com/security/CVE-2020-11100