Lucene search
PRIOn knowledge basePRION:CVE-2018-20103HistoryDec 12, 2018 - 5:29 p.m.
Stack overflow
2018-12-1217:29:00
PRIOn knowledge base
www.prio-n.com
20
An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 18.10 | |
| haproxy | le | 1.8.14 | |
| openshift_container_platform | eq | 3.11 |
References
git.haproxy.org/?p=haproxy.git;a=commit;h=58df5aea0a0c926b2238f65908f5e9f83d1cca25
www.securityfocus.com/bid/106280
access.redhat.com/errata/RHBA-2019:0326
access.redhat.com/errata/RHBA-2019:0327
access.redhat.com/errata/RHSA-2019:1436
lists.debian.org/debian-lts-announce/2022/05/msg00045.html
usn.ubuntu.com/3858-1/
Related
debiancve
debiancve
CVE-2018-20103
2018-12-12 17:29:00
veracode
veracode
Denial Of Service (DoS)
2019-05-16 03:24:03
cve
cve
CVE-2018-20103
2018-12-12 17:29:00
osv
osv
CVE-2018-20103
2018-12-12 17:29:00
haproxy - security update
2022-05-30 00:00:00
checkpoint_advisories
checkpoint_advisories
HAProxy Compressed Name Denial of Service (CVE-2018-20103)
2019-04-16 00:00:00
cvelist
cvelist
CVE-2018-20103
2018-12-12 17:00:00
nvd
nvd
CVE-2018-20103
2018-12-12 17:29:00
ubuntucve
ubuntucve
CVE-2018-20103
2018-12-12 00:00:00
redhatcve
redhatcve
CVE-2018-20103
2020-04-09 07:09:19
fedora
fedora
[SECURITY] Fedora 28 Update: haproxy-1.8.17-1.fc28
2019-01-25 02:45:07
[SECURITY] Fedora 28 Update: haproxy-1.8.15-1.fc28
2019-01-11 02:59:52
[SECURITY] Fedora 29 Update: haproxy-1.8.15-1.fc29
2019-01-11 04:34:53
suse
suse
Security update for haproxy (important)
2019-01-12 00:00:00
nessus
nessus
openSUSE Security Update : haproxy (openSUSE-2019-44)
2019-01-14 00:00:00
Photon OS 1.0: Haproxy PHSA-2019-1.0-0220
2019-05-15 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS : HAProxy vulnerabilities (USN-3858-1)
2019-01-16 00:00:00
archlinux
archlinux
[ASA-201901-15] haproxy: denial of service
2019-01-24 00:00:00
openvas
openvas
openSUSE: Security Advisory for haproxy (openSUSE-SU-2019:0044-1)
2019-01-12 00:00:00
Fedora Update for haproxy FEDORA-2018-2abadd4469
2019-01-12 00:00:00
Debian: Security Advisory (DLA-3034-1)
2022-06-01 00:00:00
ubuntu
ubuntu
HAProxy vulnerabilities
2019-01-15 00:00:00
debian
debian
[SECURITY] [DLA 3034-1] haproxy security update
2022-05-30 16:20:11
redhat
redhat
photon
photon
ibm
ibm
rosalinux
rosalinux
Advisory ROSA-SA-2021-1851
2021-07-02 17:04:24