Security Advisory

CVE-2019-11323

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-05-09 13:42:28
Last updated 2024-08-04 22:48:09
Assigner mitre
State PUBLISHED

Description

HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/ssl_sock.h error.