CVE-2019-14241: High severity aprox aproxengine vulnerability
HAProxy through 2.0.2 allows attackers to cause a denial of service (hapanic) via vectors related to htxmanageclientsidecookies in protohtx.c.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-14241?
CVE-2019-14241 is a vulnerability in HAProxy versions 1.4 through 2.0.2 that allows attackers to cause a denial of service by triggering a ha_panic via vectors related to htx_manage_client_side_cookies in proto_htx.c.
What is the severity of CVE-2019-14241?
The severity of CVE-2019-14241 is high, with a severity value of 7.5.
How can I exploit CVE-2019-14241?
As a cybersecurity analyst, I cannot provide information on how to exploit vulnerabilities. The purpose of this FAQ is to provide information on the vulnerability and its impact, as well as mitigation measures.
How do I fix CVE-2019-14241?
To fix CVE-2019-14241, it is recommended to upgrade HAProxy to a version that is not affected by the vulnerability. Refer to the official HAProxy documentation for specific upgrade instructions.
Where can I find more information about CVE-2019-14241?
You can find more information about CVE-2019-14241 at the following references: [http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00060.html](http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00060.html) and [http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00062.html](http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00062.html).