First published: Tue Mar 31 2020(Updated: )
In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
debian/haproxy | 1.8.19-1+deb10u3 1.8.19-1+deb10u4 2.2.9-2+deb11u5 2.6.12-1 2.6.15-1 | |
ubuntu/haproxy | <1.8.8-1ubuntu0.10 | 1.8.8-1ubuntu0.10 |
ubuntu/haproxy | <2.0.5-1ubuntu0.4 | 2.0.5-1ubuntu0.4 |
ubuntu/haproxy | <2.0.14 | 2.0.14 |
redhat/haproxy | <2.1.4 | 2.1.4 |
Haproxy Haproxy | >=1.8.0<2.1.4 | |
Debian Debian Linux | =10.0 | |
Redhat Openshift Container Platform | =3.11 | |
Redhat Openshift Container Platform | =4.0 | |
Fedoraproject Fedora | =30 | |
Fedoraproject Fedora | =31 | |
Canonical Ubuntu Linux | =18.04 | |
Canonical Ubuntu Linux | =19.10 | |
openSUSE Leap | =15.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2020-11100.
The severity of CVE-2020-11100 is high with a severity value of 8.8.
The versions affected by CVE-2020-11100 include HAProxy 1.8 through 2.x before 2.1.4.
A remote attacker can exploit CVE-2020-11100 by sending a crafted HTTP/2 request, which can allow them to write arbitrary bytes around a certain location on the heap, possibly leading to remote code execution.
Yes, there are remediation steps available for CVE-2020-11100. Please refer to the official references for more information on how to mitigate this vulnerability.