CVE-2018-14645

概要

参考情報

• access.redhat.com/errata/RHBA-2019:0028
• access.redhat.com/errata/RHSA-2018:2882 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• usn.ubuntu.com/3780-1 · Third Party Advisory
• mail-archive.com/haproxy%40formilux.org/msg31253.html

haproxy のその他の脆弱性

• CVE-2026-26081中 4.8HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also …
• CVE-2026-26080低 3.7HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and AL…
• CVE-2026-55204高 7.5HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tb…
• CVE-2026-55203緊急 9.1HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allow…
• CVE-2026-33555中 5.8An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announc…