What’s Vulnerable › Vulnerabilities

CVE-2018-20615

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-03-21 · updated 2026-06-17
• Weakness: CWE-125

Description

An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame.

Affected products

• Canonical Ubuntu Linux: 16.04, 18.04, 18.10
• HAProxy: from 1.8.0 through 1.8.19; 1.9.0, 1.9.0-dev0, 1.9.0-dev1, 1.9.0-dev10, 1.9.0-dev11, 1.9.0-dev2 (+7)
• openSUSE Leap: 15.0
• Red Hat Enterprise Linux: 7.0, 7.4, 7.5, 7.6
• Red Hat OpenShift Container Platform 4.18: 3.11

References

• http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00018.html
• http://www.securityfocus.com/bid/106645
• https://access.redhat.com/errata/RHBA-2019:0327
• https://access.redhat.com/errata/RHSA-2019:0275
• https://usn.ubuntu.com/3858-1/
• https://www.mail-archive.com/haproxy%40formilux.org/msg32304.html
• http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00018.html
• http://www.securityfocus.com/bid/106645
• https://access.redhat.com/errata/RHBA-2019:0327
• https://access.redhat.com/errata/RHSA-2019:0275
• https://usn.ubuntu.com/3858-1/
• https://www.mail-archive.com/haproxy%40formilux.org/msg32304.html

Get alerted when CVE-2018-20615 or the next vulnerability affects your stack