CVE-2018-10184

score

<0.1

cvss

7.5

epss

8.1% ▼0.1

published

2018-05-09

kev added

—

first seen

2026-10-21

HAProxy before 1.8.8 contains a buffer overflow caused by incorrect frame length validation against max_frame_size instead of bufsize for incoming H2 frames, letting attackers cause a crash, exploit requires sending a large enough frame size in SETTINGS.