CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11100

In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.781

EPSS Ranking 99.0%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2020-11100

Haproxy » Haproxy » Version: 1.8.0

cpe:2.3:a:haproxy:haproxy:1.8.0
Haproxy » Haproxy » Version: 1.8.1

cpe:2.3:a:haproxy:haproxy:1.8.1
Haproxy » Haproxy » Version: 1.8.10

cpe:2.3:a:haproxy:haproxy:1.8.10
Haproxy » Haproxy » Version: 1.8.11

cpe:2.3:a:haproxy:haproxy:1.8.11
Haproxy » Haproxy » Version: 1.8.12

cpe:2.3:a:haproxy:haproxy:1.8.12
Haproxy » Haproxy » Version: 1.8.13

cpe:2.3:a:haproxy:haproxy:1.8.13
Haproxy » Haproxy » Version: 1.8.14

cpe:2.3:a:haproxy:haproxy:1.8.14
Haproxy » Haproxy » Version: 1.8.15

cpe:2.3:a:haproxy:haproxy:1.8.15
Haproxy » Haproxy » Version: 1.8.16

cpe:2.3:a:haproxy:haproxy:1.8.16
Haproxy » Haproxy » Version: 1.8.17

cpe:2.3:a:haproxy:haproxy:1.8.17
Haproxy » Haproxy » Version: 1.8.18

cpe:2.3:a:haproxy:haproxy:1.8.18
Haproxy » Haproxy » Version: 1.8.19

cpe:2.3:a:haproxy:haproxy:1.8.19
Haproxy » Haproxy » Version: 1.8.2

cpe:2.3:a:haproxy:haproxy:1.8.2
Haproxy » Haproxy » Version: 1.8.20

cpe:2.3:a:haproxy:haproxy:1.8.20
Haproxy » Haproxy » Version: 1.8.21

cpe:2.3:a:haproxy:haproxy:1.8.21
Haproxy » Haproxy » Version: 1.8.3

cpe:2.3:a:haproxy:haproxy:1.8.3
Haproxy » Haproxy » Version: 1.8.4

cpe:2.3:a:haproxy:haproxy:1.8.4
Haproxy » Haproxy » Version: 1.8.5

cpe:2.3:a:haproxy:haproxy:1.8.5
Haproxy » Haproxy » Version: 1.8.6

cpe:2.3:a:haproxy:haproxy:1.8.6
Haproxy » Haproxy » Version: 1.8.7

cpe:2.3:a:haproxy:haproxy:1.8.7
Haproxy » Haproxy » Version: 1.8.8

cpe:2.3:a:haproxy:haproxy:1.8.8
Haproxy » Haproxy » Version: 1.8.9

cpe:2.3:a:haproxy:haproxy:1.8.9
Haproxy » Haproxy » Version: 1.9.0

cpe:2.3:a:haproxy:haproxy:1.9.0
Haproxy » Haproxy » Version: 1.9.1

cpe:2.3:a:haproxy:haproxy:1.9.1
Haproxy » Haproxy » Version: 1.9.10

cpe:2.3:a:haproxy:haproxy:1.9.10
Haproxy » Haproxy » Version: 1.9.2

cpe:2.3:a:haproxy:haproxy:1.9.2
Haproxy » Haproxy » Version: 1.9.3

cpe:2.3:a:haproxy:haproxy:1.9.3
Haproxy » Haproxy » Version: 1.9.4

cpe:2.3:a:haproxy:haproxy:1.9.4
Haproxy » Haproxy » Version: 1.9.5

cpe:2.3:a:haproxy:haproxy:1.9.5
Haproxy » Haproxy » Version: 1.9.6

cpe:2.3:a:haproxy:haproxy:1.9.6
Haproxy » Haproxy » Version: 1.9.7

cpe:2.3:a:haproxy:haproxy:1.9.7
Haproxy » Haproxy » Version: 1.9.8

cpe:2.3:a:haproxy:haproxy:1.9.8
Haproxy » Haproxy » Version: 1.9.9

cpe:2.3:a:haproxy:haproxy:1.9.9
Haproxy » Haproxy » Version: 2.0.0

cpe:2.3:a:haproxy:haproxy:2.0.0
Haproxy » Haproxy » Version: 2.0.1

cpe:2.3:a:haproxy:haproxy:2.0.1
Haproxy » Haproxy » Version: 2.0.10

cpe:2.3:a:haproxy:haproxy:2.0.10
Haproxy » Haproxy » Version: 2.0.11

cpe:2.3:a:haproxy:haproxy:2.0.11
Haproxy » Haproxy » Version: 2.0.12

cpe:2.3:a:haproxy:haproxy:2.0.12
Haproxy » Haproxy » Version: 2.0.13

cpe:2.3:a:haproxy:haproxy:2.0.13
Haproxy » Haproxy » Version: 2.0.14

cpe:2.3:a:haproxy:haproxy:2.0.14
Haproxy » Haproxy » Version: 2.0.15

cpe:2.3:a:haproxy:haproxy:2.0.15
Haproxy » Haproxy » Version: 2.0.16

cpe:2.3:a:haproxy:haproxy:2.0.16
Haproxy » Haproxy » Version: 2.0.17

cpe:2.3:a:haproxy:haproxy:2.0.17
Haproxy » Haproxy » Version: 2.0.18

cpe:2.3:a:haproxy:haproxy:2.0.18
Haproxy » Haproxy » Version: 2.0.19

cpe:2.3:a:haproxy:haproxy:2.0.19
Haproxy » Haproxy » Version: 2.0.2

cpe:2.3:a:haproxy:haproxy:2.0.2
Haproxy » Haproxy » Version: 2.0.20

cpe:2.3:a:haproxy:haproxy:2.0.20
Haproxy » Haproxy » Version: 2.0.21

cpe:2.3:a:haproxy:haproxy:2.0.21
Haproxy » Haproxy » Version: 2.0.22

cpe:2.3:a:haproxy:haproxy:2.0.22
Haproxy » Haproxy » Version: 2.0.23

cpe:2.3:a:haproxy:haproxy:2.0.23
Haproxy » Haproxy » Version: 2.0.24

cpe:2.3:a:haproxy:haproxy:2.0.24
Haproxy » Haproxy » Version: 2.0.25

cpe:2.3:a:haproxy:haproxy:2.0.25
Haproxy » Haproxy » Version: 2.0.26

cpe:2.3:a:haproxy:haproxy:2.0.26
Haproxy » Haproxy » Version: 2.0.27

cpe:2.3:a:haproxy:haproxy:2.0.27
Haproxy » Haproxy » Version: 2.0.28

cpe:2.3:a:haproxy:haproxy:2.0.28
Haproxy » Haproxy » Version: 2.0.29

cpe:2.3:a:haproxy:haproxy:2.0.29
Haproxy » Haproxy » Version: 2.0.3

cpe:2.3:a:haproxy:haproxy:2.0.3
Haproxy » Haproxy » Version: 2.0.30

cpe:2.3:a:haproxy:haproxy:2.0.30
Haproxy » Haproxy » Version: 2.0.31

cpe:2.3:a:haproxy:haproxy:2.0.31
Haproxy » Haproxy » Version: 2.0.32

cpe:2.3:a:haproxy:haproxy:2.0.32
Haproxy » Haproxy » Version: 2.0.4

cpe:2.3:a:haproxy:haproxy:2.0.4
Haproxy » Haproxy » Version: 2.0.5

cpe:2.3:a:haproxy:haproxy:2.0.5
Haproxy » Haproxy » Version: 2.0.6

cpe:2.3:a:haproxy:haproxy:2.0.6
Haproxy » Haproxy » Version: 2.0.7

cpe:2.3:a:haproxy:haproxy:2.0.7
Haproxy » Haproxy » Version: 2.0.8

cpe:2.3:a:haproxy:haproxy:2.0.8
Haproxy » Haproxy » Version: 2.0.9

cpe:2.3:a:haproxy:haproxy:2.0.9
Haproxy » Haproxy » Version: 2.1.0

cpe:2.3:a:haproxy:haproxy:2.1.0
Haproxy » Haproxy » Version: 2.1.1

cpe:2.3:a:haproxy:haproxy:2.1.1
Haproxy » Haproxy » Version: 2.1.2

cpe:2.3:a:haproxy:haproxy:2.1.2
Haproxy » Haproxy » Version: 2.1.3

cpe:2.3:a:haproxy:haproxy:2.1.3
Redhat » Openshift Container Platform » Version: 3.11

cpe:2.3:a:redhat:openshift_container_platform:3.11
Redhat » Openshift Container Platform » Version: 4.0

cpe:2.3:a:redhat:openshift_container_platform:4.0
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.10

cpe:2.3:o:canonical:ubuntu_linux:19.10
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11100

Products

Pricing

Contact Us