onyx --cves cve-2018-20102
CVE-2018-20102
- score
- <0.1
- cvss
- 7.5
- epss
- 4.2%
- published
- 2018-12-12
- kev added
- —
- first seen
HAProxy 1.8.14 contains an out-of-bounds read caused by missing validation in dns_validate_dns_response in dns.c, letting remote attackers read uninitialized memory or past the buffer, exploit requires sending crafted DNS responses.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 7
- https://access.redhat.com/errata/RHBA-2019:0327
- https://usn.ubuntu.com/3858-1/
- http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=efbbdf72992cd20458259962346044cafd9331c0
- https://access.redhat.com/errata/RHSA-2019:1436
- https://lists.debian.org/debian-lts-announce/2022/05/msg00045.html
- http://www.securityfocus.com/bid/106223
- https://access.redhat.com/errata/RHBA-2019:0326