In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2020-04-02T14:23:05
Updated: 2020-12-24T15:06:20
Reserved: 2020-03-30T00:00:00
Link: CVE-2020-11100
JSON object: View
NVD Information
Status : Modified
Published: 2020-04-02T15:15:17.483
Modified: 2023-11-07T03:14:30.167
Link: CVE-2020-11100
JSON object: View
Redhat Information
No data.
CWE