CVE-2018-14645
Fixed in a distro release EPSS 3%CVSS 7.5
A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.
Products: haproxy, canonical ubuntu_linux, redhat openshift, redhat openshift_container_platform, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | haproxy | 1.8.13-2 |
| Debian 13 | haproxy | 1.8.13-2 |
| Debian 14 | haproxy | 1.8.13-2 |
| Red Hat openshift 3.10 | atomic-openshift | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-clients | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-clients-redistributable | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-docker-excluder | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-excluder | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-hyperkube | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-hypershift | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-master | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-node | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-pod | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-sdn-ovs | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-template-service-broker | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | atomic-openshift-tests | 0:3.10.66-1.git.0.91d1e89.el7 |
| Red Hat openshift 3.10 | haproxy | 0:1.8.14-2.el7 |
| Red Hat openshift 3.10 | haproxy-debuginfo | 0:1.8.14-2.el7 |
| Red Hat openshift 3.10 | haproxy18 | 0:1.8.14-2.el7 |
| Red Hat openshift 3.9 | atomic-openshift | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-clients | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-clients-redistributable | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-cluster-capacity | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-docker-excluder | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-dockerregistry | 0:3.9.60-1.git.353.1da3b27.el7 |
| Red Hat openshift 3.9 | atomic-openshift-excluder | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-federation-services | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-master | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-node | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-pod | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-sdn-ovs | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-service-catalog | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-template-service-broker | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-tests | 0:3.9.60-1.git.0.f8b38ff.el7 |
| Red Hat openshift 3.9 | atomic-openshift-utils | 0:3.9.60-1.git.0.f0ebfaa.el7 |
| Red Hat openshift 3.9 | atomic-openshift-web-console | 0:3.9.60-1.git.277.be8dbdd.el7 |
| Red Hat openshift 3.9 | golang-github-prometheus-node_exporter | 0:3.9.60-1.git.1063.df94c95.el7 |
| Red Hat openshift 3.9 | haproxy | 0:1.8.14-2.el7 |
| Red Hat openshift 3.9 | haproxy-debuginfo | 0:1.8.14-2.el7 |
| Red Hat openshift 3.9 | haproxy18 | 0:1.8.14-2.el7 |
| Red Hat openshift 3.9 | openshift-ansible | 0:3.9.60-1.git.0.f0ebfaa.el7 |
| Red Hat openshift 3.9 | openshift-ansible-docs | 0:3.9.60-1.git.0.f0ebfaa.el7 |
| Red Hat openshift 3.9 | openshift-ansible-playbooks | 0:3.9.60-1.git.0.f0ebfaa.el7 |
| Red Hat openshift 3.9 | openshift-ansible-roles | 0:3.9.60-1.git.0.f0ebfaa.el7 |
| Red Hat openshift 3.9 | prometheus-node-exporter | 0:3.9.60-1.git.1063.df94c95.el7 |
| Red Hat openshift 3.9 | rubygem-ffi | 0:1.9.25-4.el7_5 |
| Red Hat openshift 3.9 | rubygem-ffi-debuginfo | 0:1.9.25-4.el7_5 |
| Red Hat rhel software collections 3 | rh-haproxy18-haproxy | 0:1.8.4-3.el7 |
| Red Hat rhel software collections 3 | rh-haproxy18-haproxy-debuginfo | 0:1.8.4-3.el7 |
| Red Hat rhel software collections 3 | rh-haproxy18-haproxy-syspaths | 0:1.8.4-3.el7 |
| SUSE Linux Enterprise High Availability Extension 15 | haproxy | 1.8.14~git0.52e4d43b-3.3.2 |
| Ubuntu 18.04 LTS | haproxy | 1.8.8-1ubuntu0.2 |
| openSUSE Tumbleweed | haproxy | 2.4.4+git0.acb1d0bea-1.2 |