Vulnetix
Try Vulnetix Request Demo
CVE-2018-20615 PUBLISHED

An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame.

EPSS 0.17% · 37.5th percentile

Risk Scores

EPSS Score
0.17%
37.5th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTShaproxy0, 1.7.9-1ubuntu1, 1.7.9-1ubuntu2

Timeline

References

Open in Interactive Console →