onyx

onyx --cves cve-2018-20103

CVE-2018-20103

HIGHHAProxy
score
<0.1
cvss
7.5
epss
6.6%
published
2018-12-12
kev added
—
first seen

HAProxy through 1.8.14 contains a stack exhaustion caused by infinite recursion or long chain of pointers in dns.c when handling compressed pointers, letting remote attackers cause denial of service, exploit requires sending crafted DNS packets.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2018-12-12 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 6.6%2026-09-23: epss 6.6%2026-09-24: epss 6.6%2026-09-25: epss 6.6%2026-09-26: epss 6.6%2026-09-27: epss 6.6%2026-09-28: epss 6.6%2026-09-29: epss 6.6%2026-09-30: epss 6.6%2026-10-01: epss 6.6%2026-10-02: epss 6.6%2026-10-03: epss 6.6%2026-10-04: epss 6.6%2026-10-05: epss 6.6%2026-10-06: epss 6.6%2026-10-07: epss 6.6%2026-10-08: epss 6.6%2026-10-09: epss 6.6%2026-10-10: epss 6.6%2026-10-11: epss 6.6%2026-10-12: epss 6.6%2026-10-13: epss 6.6%2026-10-14: epss 6.6%2026-10-15: epss 6.6%2026-10-16: epss 6.6%2026-10-18: epss 6.6%2026-10-19: epss 6.6%2026-10-20: epss 6.6%2026-10-21: epss 6.6%6.6%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-835

References 7