Lucene search

K
cvelistMitreCVELIST:CVE-2019-19330
HistoryNov 27, 2019 - 3:53 p.m.

CVE-2019-19330

2019-11-2715:53:26
mitre
www.cve.org
1

9.3 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.4%

The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.