CVE-2020-11100

Mô tả

Tham khảo

• lists.opensuse.org/opensuse-security-announce/2020-04/msg00002.html · Mailing List
• packetstormsecurity.com/files/157323/haproxy-hpack-tbl.c-Out-Of-Bounds-Write.html · Third Party Advisory
• haproxy.org · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• bugzilla.suse.com/show_bug.cgi · Issue Tracking
• git.haproxy.org
• lists.debian.org/debian-security-announce/2020/msg00052.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/264C7UL3X7L7QE74ZJ557IOUFS3J4QQC
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MNW5RZLIX7LOXRLV7WMHX22CI43XSXKW
• security.gentoo.org/glsa/202012-22

Lỗ hổng khác của haproxy

• CVE-2026-26081TRUNG BÌNH 4.8HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also …
• CVE-2026-26080THẤP 3.7HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and AL…
• CVE-2026-55204CAO 7.5HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tb…
• CVE-2026-55203NGHIÊM TRỌNG 9.1HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allow…
• CVE-2026-33555TRUNG BÌNH 5.8An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announc…