high7.5
CVE-2019-14241
HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.
Impact
HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Haproxy | Haproxy | from 1.4 through 1.9.8 from 2.0.0 through 2.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00060.html
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00062.html
- http://www.securityfocus.com/bid/109352
- https://github.com/haproxy/haproxy/issues/181
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00060.html
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00062.html
- http://www.securityfocus.com/bid/109352
- https://github.com/haproxy/haproxy/issues/181