CVE-2018-20615
Fixed in a distro release EPSS 4%
An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame.
Products: haproxy, opensuse leap, canonical ubuntu_linux, redhat openshift_container_platform, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | haproxy | 1.8.16-2 |
| Debian 13 | haproxy | 1.8.16-2 |
| Debian 14 | haproxy | 1.8.16-2 |
| Red Hat openshift 3.10 | haproxy | 0:1.8.17-3.el7 |
| Red Hat openshift 3.10 | haproxy-debuginfo | 0:1.8.17-3.el7 |
| Red Hat openshift 3.10 | haproxy18 | 0:1.8.17-3.el7 |
| Red Hat openshift 3.11 | atomic-enterprise-service-catalog | 1:3.11.82-1.git.1673.133961e.el7 |
| Red Hat openshift 3.11 | atomic-enterprise-service-catalog-svcat | 1:3.11.82-1.git.1673.133961e.el7 |
| Red Hat openshift 3.11 | atomic-openshift | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-clients | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-clients-redistributable | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-cluster-autoscaler | 0:3.11.82-1.git.0.efb6af0.el7 |
| Red Hat openshift 3.11 | atomic-openshift-descheduler | 0:3.11.82-1.git.300.89765c9.el7 |
| Red Hat openshift 3.11 | atomic-openshift-docker-excluder | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-dockerregistry | 0:3.11.82-1.git.452.0ce6383.el7 |
| Red Hat openshift 3.11 | atomic-openshift-excluder | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-hyperkube | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-hypershift | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-master | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-metrics-server | 0:3.11.82-1.git.52.2fdca3f.el7 |
| Red Hat openshift 3.11 | atomic-openshift-node | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-node-problem-detector | 0:3.11.82-1.git.254.a448936.el7 |
| Red Hat openshift 3.11 | atomic-openshift-pod | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-sdn-ovs | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-service-idler | 0:3.11.82-1.git.14.e353758.el7 |
| Red Hat openshift 3.11 | atomic-openshift-template-service-broker | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-tests | 0:3.11.82-1.git.0.08bc31b.el7 |
| Red Hat openshift 3.11 | atomic-openshift-web-console | 0:3.11.82-1.git.355.5e8b1d9.el7 |
| Red Hat openshift 3.11 | golang-github-openshift-oauth-proxy | 0:3.11.82-1.git.425.7cac034.el7 |
| Red Hat openshift 3.11 | golang-github-prometheus-alertmanager | 0:3.11.82-1.git.0.3bf41ce.el7 |
| Red Hat openshift 3.11 | golang-github-prometheus-node_exporter | 0:3.11.82-1.git.1063.48444e8.el7 |
| Red Hat openshift 3.11 | golang-github-prometheus-prometheus | 0:3.11.82-1.git.5027.9d24833.el7 |
| Red Hat openshift 3.11 | haproxy | 0:1.8.17-3.el7 |
| Red Hat openshift 3.11 | haproxy-debuginfo | 0:1.8.17-3.el7 |
| Red Hat openshift 3.11 | haproxy18 | 0:1.8.17-3.el7 |
| Red Hat openshift 3.11 | jenkins | 0:2.150.2.1549032159-1.el7 |
| Red Hat openshift 3.11 | jenkins-2-plugins | 0:3.11.1549642489-1.el7 |
| Red Hat openshift 3.11 | openshift-ansible | 0:3.11.82-3.git.0.9718d0a.el7 |
| Red Hat openshift 3.11 | openshift-ansible-docs | 0:3.11.82-3.git.0.9718d0a.el7 |
| Red Hat openshift 3.11 | openshift-ansible-playbooks | 0:3.11.82-3.git.0.9718d0a.el7 |
| Red Hat openshift 3.11 | openshift-ansible-roles | 0:3.11.82-3.git.0.9718d0a.el7 |
| Red Hat openshift 3.11 | openshift-ansible-test | 0:3.11.82-3.git.0.9718d0a.el7 |
| Red Hat openshift 3.11 | openshift-enterprise-autoheal | 0:3.11.82-1.git.219.0b5aff4.el7 |
| Red Hat openshift 3.11 | openshift-enterprise-cluster-capacity | 0:3.11.82-1.git.380.cf11c51.el7 |
| Red Hat openshift 3.11 | prometheus | 0:3.11.82-1.git.5027.9d24833.el7 |
| Red Hat openshift 3.11 | prometheus-alertmanager | 0:3.11.82-1.git.0.3bf41ce.el7 |
| Red Hat openshift 3.11 | prometheus-node-exporter | 0:3.11.82-1.git.1063.48444e8.el7 |
| Red Hat openshift 3.9 | haproxy | 0:1.8.17-3.el7 |
| Red Hat openshift 3.9 | haproxy-debuginfo | 0:1.8.17-3.el7 |
| Red Hat openshift 3.9 | haproxy18 | 0:1.8.17-3.el7 |
| Red Hat rhel software collections 3 | rh-haproxy18-haproxy | 0:1.8.4-4.el7 |
| Red Hat rhel software collections 3 | rh-haproxy18-haproxy-debuginfo | 0:1.8.4-4.el7 |
| Red Hat rhel software collections 3 | rh-haproxy18-haproxy-syspaths | 0:1.8.4-4.el7 |
| SUSE Linux Enterprise High Availability Extension 15 | haproxy | 1.8.17~git0.e89d25b2-3.9.1 |
| Ubuntu 16.04 LTS | haproxy | 1.6.3-1ubuntu0.2 |
| Ubuntu 18.04 LTS | haproxy | 1.8.8-1ubuntu0.3 |
| openSUSE Tumbleweed | haproxy | 2.4.4+git0.acb1d0bea-1.2 |