ISOMAN

CVE

CVE-2018-14645

A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. https://access.redhat.com/errata/RHBA-2019:0028
  2. https://access.redhat.com/errata/RHSA-2018:2882
  3. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14645
  4. https://usn.ubuntu.com/3780-1/
  5. https://www.mail-archive.com/haproxy%40formilux.org/msg31253.html
  6. https://access.redhat.com/errata/RHBA-2019:0028
  7. https://access.redhat.com/errata/RHSA-2018:2882
  8. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14645
  9. https://usn.ubuntu.com/3780-1/
  10. https://www.mail-archive.com/haproxy%40formilux.org/msg31253.html