About haproxy and CVE-2019-14241

From	Martin <keine-eile@online.de>
Newsgroups	linux.debian.user
Subject	About haproxy and CVE-2019-14241
Date	2019-07-24 10:10 +0200
Message-ID	<ynkvv-7VS-1@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi list,

I've received an advisory issued by one of my client's CERT. It is about haproxy and CVE-2019-14241:

"HAProxy contains a flaw in the htx_manage_client_side_cookies() function in proto_htx.c that is triggered when handling certain threads. This may allow a remote attacker to cause a denial of service."

At MITRE, this CVE exists, but I did not get any about it from the DSA or oss-security list. Does one of you know about more this?

Martin

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

About haproxy and CVE-2019-14241 Martin <keine-eile@online.de> - 2019-07-24 10:10 +0200
  Re: About haproxy and CVE-2019-14241 Reco <recoverym4n@enotuniq.net> - 2019-07-24 11:20 +0200

csiph-web