CVE-2019-14241

Опубликовано: 23 июл. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00060.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00062.html
http://www.securityfocus.com/bid/109352
Third Party Advisory
VDB Entry
https://github.com/haproxy/haproxy/issues/181
Exploit
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00060.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00062.html
http://www.securityfocus.com/bid/109352
Third Party Advisory
VDB Entry
https://github.com/haproxy/haproxy/issues/181
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*

Версия от 1.4 (включая) до 1.9.8 (включая)

cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*

Версия от 2.0.0 (включая) до 2.0.2 (включая)

EPSS

Процентиль: 97%

0.37036

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2019-14241

CVSS3: 7.5

ubuntu

больше 6 лет назад

HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.

CVE-2019-14241

CVSS3: 7.5

redhat

больше 6 лет назад

HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.

CVE-2019-14241

CVSS3: 7.5

debian

больше 6 лет назад

HAProxy through 2.0.2 allows attackers to cause a denial of service (h ...

openSUSE-SU-2019:2556-1

suse-cvrf

около 6 лет назад

Security update for haproxy

openSUSE-SU-2019:2555-1

suse-cvrf

около 6 лет назад

Security update for haproxy

EPSS

Процентиль: 97%

0.37036

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-835