CVE-2020-11100

Description

In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

74.791

Associated Vulnerability

Vulnerability	OS Platform
haproxy security update(DSA-4649-1) haproxy_1.8.19-1+deb10u2_i386.deb	Linux
haproxy security update(DSA-4649-1) haproxy_1.8.19-1+deb10u2_amd64.deb	Linux
fast and reliable load balancing reverse proxy (USN-4321-1) haproxy_2.0.5-1ubuntu0.4_i386.deb	Linux
fast and reliable load balancing reverse proxy (USN-4321-1) haproxy_2.0.5-1ubuntu0.4_amd64.deb	Linux
fast and reliable load balancing reverse proxy (USN-4321-1) haproxy_1.8.8-1ubuntu0.10_i386.deb	Linux
fast and reliable load balancing reverse proxy (USN-4321-1) haproxy_1.8.8-1ubuntu0.10_amd64.deb	Linux
Haproxy update (ELSA-2020-1288) haproxy-1.8.15-6.el8_1.1.x86_64.rpm	Linux
Haproxy update (ELSA-2020-1725) haproxy-1.8.23-3.el8.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234