ISOMAN

CVE

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=58df5aea0a0c926b2238f65908f5e9f83d1cca25
  2. http://www.securityfocus.com/bid/106280
  3. https://access.redhat.com/errata/RHBA-2019:0326
  4. https://access.redhat.com/errata/RHBA-2019:0327
  5. https://access.redhat.com/errata/RHSA-2019:1436
  6. https://lists.debian.org/debian-lts-announce/2022/05/msg00045.html
  7. https://usn.ubuntu.com/3858-1/
  8. http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=58df5aea0a0c926b2238f65908f5e9f83d1cca25
  9. http://www.securityfocus.com/bid/106280
  10. https://access.redhat.com/errata/RHBA-2019:0326
  11. https://access.redhat.com/errata/RHBA-2019:0327
  12. https://access.redhat.com/errata/RHSA-2019:1436
  13. https://lists.debian.org/debian-lts-announce/2022/05/msg00045.html
  14. https://usn.ubuntu.com/3858-1/