Lucene search
PRIOn knowledge basePRION:CVE-2019-19330HistoryNov 27, 2019 - 4:15 p.m.
Design/Logic Flaw
2019-11-2716:15:00
PRIOn knowledge base
www.prio-n.com
6
The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 19.04 | |
| ubuntu_linux | eq | 19.10 | |
| debian_linux | eq | 10.0 | |
| haproxy | lt | 2.0.10 |
References
git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e
git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878
git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344
seclists.org/bugtraq/2019/Nov/45
security.gentoo.org/glsa/202004-01
tools.ietf.org/html/rfc7540
usn.ubuntu.com/4212-1/
www.debian.org/security/2019/dsa-4577
Related
openvas
openvas
Ubuntu: Security Advisory (USN-4212-1)
2019-12-05 00:00:00
Debian: Security Advisory (DSA-4577-1)
2019-11-29 00:00:00
Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2020-1904)
2020-08-31 00:00:00
ibm
ibm
osv
osv
haproxy - security update
2019-11-28 00:00:00
CVE-2019-19330
2019-11-27 16:15:11
nvd
nvd
CVE-2019-19330
2019-11-27 16:15:11
ubuntu
ubuntu
HAProxy vulnerability
2019-12-04 00:00:00
ubuntucve
ubuntucve
CVE-2019-19330
2019-11-27 00:00:00
cve
cve
CVE-2019-19330
2019-11-27 16:15:11
redhatcve
redhatcve
CVE-2019-19330
2019-11-27 21:48:17
alpinelinux
alpinelinux
CVE-2019-19330
2019-11-27 16:15:11
debian
debian
[SECURITY] [DSA 4577-1] haproxy security update
2019-11-28 08:20:22
[SECURITY] [DSA 4577-1] haproxy security update
2019-11-28 08:20:22
checkpoint_advisories
checkpoint_advisories
HAProxy HTTP2 CRLF Injection (CVE-2019-19330)
2020-08-02 00:00:00
nessus
nessus
Photon OS 1.0: Haproxy PHSA-2019-1.0-0263
2020-01-16 00:00:00
Debian DSA-4577-1 : haproxy - security update
2019-12-03 00:00:00
Ubuntu 18.04 LTS : HAProxy vulnerability (USN-4212-1)
2019-12-05 00:00:00
debiancve
debiancve
CVE-2019-19330
2019-11-27 16:15:11
symantec
symantec
HAProxy CVE-2019-19330 CRLF Injection Vulnerability
2019-11-27 00:00:00
gentoo
gentoo
HAProxy: Remote execution of arbitrary code
2020-04-01 00:00:00
veracode
veracode
CRLF Injection
2020-05-06 03:21:44
cvelist
cvelist
CVE-2019-19330
2019-11-27 15:53:26
redhat
redhat
photon
photon
Critical Photon OS Security Update - PHSA-2019-0195
2019-12-09 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-1.0-0263
2019-12-27 00:00:00
Critical Photon OS Security Update - PHSA-2019-0263
2019-12-27 00:00:00
oraclelinux
oraclelinux
haproxy security, bug fix, and enhancement update
2020-05-05 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1851
2021-07-02 17:04:24