Описание
ELSA-2020-1288: haproxy security update (CRITICAL)
[1.8.15-6.1]
-
- Fix hapack zero byte input causing overwrite (CVE-2020-11100, #1819518)
[1.8.15-6]
- Add gating tests (#1682106)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
haproxy
1.8.15-6.el8_1.1
Oracle Linux x86_64
haproxy
1.8.15-6.el8_1.1
Связанные CVE
Связанные уязвимости
In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.
In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.
In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.
In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 ...
