Beveiligingsadvies

CVE-2020-11100

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-04-02 14:23:05
Laatst bijgewerkt 2024-08-04 11:21:14
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.