CVE-2019-14243: Input Validation
headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, allows remote attackers to cause a denial of service (webserver panic and daemon crash) via a crafted HAProxy PROXY v2 request with truncated source/destination address data.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14243?
The severity of CVE-2019-14243 is high.
How does CVE-2019-14243 affect the mastercactapus proxyprotocol package?
CVE-2019-14243 affects the mastercactapus proxyprotocol package version 0.0.2.
What is the impact of CVE-2019-14243?
CVE-2019-14243 allows remote attackers to cause a denial of service (webserver panic and daemon crash) via a crafted HAProxy PROXY v2 request with truncated source/destination.
How can I mitigate CVE-2019-14243?
To mitigate CVE-2019-14243, update the mastercactapus proxyprotocol package to version 0.0.2 or later.
Where can I find more information about CVE-2019-14243?
You can find more information about CVE-2019-14243 in the following references: [1], [2], [3].