{"id":"CVE-2018-14645","aliases":["DEBIAN-CVE-2018-14645","EUVD-2018-6543","GHSA-gr9c-vx25-2fh5","RHBA-2019:0028","RHSA-2018:2709","RHSA-2018:2882","SUSE-SU-2018:3249-1","UBUNTU-CVE-2018-14645","USN-3780-1","openSUSE-SU-2024:10839-1"],"status":"published","title":"A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An...","description":"A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.03067,"percentile":0.87726,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2018-09-21T00:00:00Z","modified":"2026-11-02T02:45:05Z","fixes":[{"ecosystem":"Debian:12","package":"haproxy","fixed_in":["1.8.13-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"haproxy","fixed_in":["1.8.13-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"haproxy","fixed_in":["1.8.13-2"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-clients","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-clients-redistributable","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-cluster-capacity","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-docker-excluder","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-dockerregistry","fixed_in":["0:3.9.60-1.git.353.1da3b27.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-excluder","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-federation-services","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-master","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-node","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-pod","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-sdn-ovs","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-service-catalog","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-template-service-broker","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-tests","fixed_in":["0:3.9.60-1.git.0.f8b38ff.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-utils","fixed_in":["0:3.9.60-1.git.0.f0ebfaa.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-web-console","fixed_in":["0:3.9.60-1.git.277.be8dbdd.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"golang-github-prometheus-node_exporter","fixed_in":["0:3.9.60-1.git.1063.df94c95.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"haproxy","fixed_in":["0:1.8.14-2.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"haproxy-debuginfo","fixed_in":["0:1.8.14-2.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"haproxy18","fixed_in":["0:1.8.14-2.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"openshift-ansible","fixed_in":["0:3.9.60-1.git.0.f0ebfaa.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"openshift-ansible-docs","fixed_in":["0:3.9.60-1.git.0.f0ebfaa.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"openshift-ansible-playbooks","fixed_in":["0:3.9.60-1.git.0.f0ebfaa.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"openshift-ansible-roles","fixed_in":["0:3.9.60-1.git.0.f0ebfaa.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"prometheus-node-exporter","fixed_in":["0:3.9.60-1.git.1063.df94c95.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"rubygem-ffi","fixed_in":["0:1.9.25-4.el7_5"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.9::el7","package":"rubygem-ffi-debuginfo","fixed_in":["0:1.9.25-4.el7_5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-haproxy18-haproxy","fixed_in":["0:1.8.4-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-haproxy18-haproxy-debuginfo","fixed_in":["0:1.8.4-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-haproxy18-haproxy-syspaths","fixed_in":["0:1.8.4-3.el7"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"haproxy","fixed_in":["1.8.8-1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.13-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.13-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.13-2"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-cluster-capacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-dockerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.353.1da3b27.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-federation-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-template-service-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f8b38ff.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f0ebfaa.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-web-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.277.be8dbdd.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.1063.df94c95.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.14-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"haproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.14-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"haproxy18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.14-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f0ebfaa.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"openshift-ansible-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f0ebfaa.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"openshift-ansible-playbooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f0ebfaa.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"openshift-ansible-roles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.0.f0ebfaa.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"prometheus-node-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.60-1.git.1063.df94c95.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"rubygem-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.25-4.el7_5"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"rubygem-ffi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.25-4.el7_5"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-hypershift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-template-service-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.14-2.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"haproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.14-2.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"haproxy18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.14-2.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-haproxy18-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.4-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-haproxy18-haproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.4-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-haproxy18-haproxy-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.4-3.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.14~git0.52e4d43b-3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-1ubuntu0.2"}]}],"versions":["1.7.9-1ubuntu1","1.7.9-1ubuntu2","1.8.4-1","1.8.7-1","1.8.8-1","1.8.8-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-1ubuntu0.2"}]}],"versions":["1.7.9-1ubuntu1","1.7.9-1ubuntu2","1.8.4-1","1.8.7-1","1.8.8-1","1.8.8-1ubuntu0.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4+git0.acb1d0bea-1.2"}]}],"bundled":9}],"products":[{"vendor":"[unknown]","product":"haproxy"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"haproxy","product":"haproxy"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"openshift"},{"vendor":"redhat","product":"openshift_container_platform"}],"references":[{"url":"https://usn.ubuntu.com/3780-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2882","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.mail-archive.com/haproxy%40formilux.org/msg31253.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14645","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Mitigation","Third Party Advisory","report"]},{"url":"https://access.redhat.com/errata/RHBA-2019:0028","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14645","tags":["advisory"]},{"url":"https://www.mail-archive.com/haproxy@formilux.org/msg31253.html","tags":["article","report"]},{"url":"https://github.com/advisories/GHSA-gr9c-vx25-2fh5"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-14645","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658453","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_0028.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1630048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14645","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2709","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1578482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628405","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642052","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2709.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14632","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14632","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14632","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2882.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183249-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1094846","tags":["report"]},{"url":"https://bugzilla.suse.com/1100787","tags":["report"]},{"url":"https://bugzilla.suse.com/1108683","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14645","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-14645","tags":["report"]},{"url":"https://git.haproxy.org/?p=haproxy-1.8.git;a=commit;h=b4e05a3daa30f657db01ec144a0e48850c48f813","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3780-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-39240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-40346","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-14645","description":"A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.","status":"published","published":"2018-09-21T13:00:00Z","modified":"2024-08-05T09:38:12.812Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:00.589142Z"}],"euvd":[{"id":"EUVD-2018-6543","description":"A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.","status":"published","published":"2018-09-21T13:00:00Z","modified":"2024-08-05T09:38:12Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T02:39:46.259365Z"}],"ghsa":[{"id":"GHSA-gr9c-vx25-2fh5","title":"A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An...","description":"A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.","status":"published","published":"2022-05-14T00:55:58Z","modified":"2023-02-02T05:02:42Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:51:29.873049Z"}],"nvd":[{"id":"CVE-2018-14645","description":"A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.","status":"published","published":"2018-09-21T13:29:00.453Z","modified":"2026-06-17T01:41:21.767Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:40.661264Z"}],"osv":[{"id":"CVE-2018-14645","description":"A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.","status":"published","published":"2018-09-21T13:29:00.453Z","modified":"2026-11-02T02:45:05.25553961Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"DEBIAN-CVE-2018-14645","description":"A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.","status":"published","published":"2018-09-21T13:29:00.453Z","modified":"2026-10-23T18:02:59.864370701Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"RHBA-2019:0028","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 3.9 bug fix and enhancement update","status":"published","published":"2024-09-13T15:07:09Z","modified":"2026-07-01T10:05:13Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2018:2709","title":"Red Hat Security Advisory: Red Hat OpenShift Container Platform 3.10 security and bug fix update","status":"published","published":"2024-09-16T01:46:07Z","modified":"2026-07-01T10:04:29Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:2882","title":"Red Hat Security Advisory: rh-haproxy18-haproxy security update","status":"published","published":"2024-09-13T15:09:26Z","modified":"2026-07-01T10:04:39Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-14645","description":"A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.","status":"published","published":"2018-09-21T00:00:00Z","modified":"2026-02-04T03:52:43.512229Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"openSUSE-SU-2024:10839-1","title":"haproxy-2.4.4+git0.acb1d0bea-1.2 on GA media","description":"These are all security issues fixed in the haproxy-2.4.4+git0.acb1d0bea-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:00:47.357107Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:3249-1","title":"Security update for haproxy","description":"This update for haproxy to version 1.8.14 fixes the following issues:\n\nThese security issues were fixed:\n\n- CVE-2018-14645: A flaw was discovered in the HPACK decoder what caused an\n  out-of-bounds read in hpack_valid_idx() that resulted in a remote crash and\n  denial of service (bsc#1108683)\n- CVE-2018-11469: Incorrect caching of responses to requests including an\n  Authorization header allowed attackers to achieve information disclosure via an\n  unauthenticated remote request (bsc#1094846).\n\nThese non-security issues were fixed:\n\n- Require apparmor-abstractions to reduce dependencies (bsc#1100787)\n- hpack: fix improper sign check on the header index value\n- cli: make sure the 'getsock' command is only called on connections\n- tools: fix set_net_port() / set_host_port() on IPv4\n- patterns: fix possible double free when reloading a pattern list\n- server: Crash when setting FQDN via CLI.\n- kqueue: Don't reset the changes number by accident.\n- snapshot: take the proxy's lock while dumping errors\n- http/threads: atomically increment the error snapshot ID\n- dns: check and link servers' resolvers right after config parsing\n- h2: fix risk of memory leak on malformated wrapped frames\n- session: fix reporting of handshake processing time in the logs\n- stream: use atomic increments for the request counter\n- thread: implement HA_ATOMIC_XADD()\n- ECC cert should work with TLS \u003c v1.2 and openssl \u003e= 1.1.1\n- dns/server: fix incomatibility between SRV resolution and server state file\n- hlua: Don't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0.\n- thread: lua: Wrong SSL context initialization.\n- hlua: Make sure we drain the output buffer when done.\n- lua: reset lua transaction between http requests\n- mux_pt: dereference the connection with care in mux_pt_wake()\n- lua: Bad HTTP client request duration.\n- unix: provide a -\u003edrain() function\n- Fix spelling error in configuration doc\n- cli/threads: protect some server commands against concurrent operations\n- cli/threads: protect all 'proxy' commands against concurrent updates\n- lua: socket timeouts are not applied\n- ssl: Use consistent naming for TLS protocols\n- dns: explain set server ... fqdn requires resolver\n- map: fix map_regm with backref\n- ssl: loading dh param from certifile causes unpredictable error.\n- ssl: fix missing error loading a keytype cert from a bundle.\n- ssl: empty connections reported as errors.\n- cli: make 'show fd' thread-safe\n- hathreads: implement a more flexible rendez-vous point\n- threads: fix the no-thread case after the change to the sync point\n- threads: add more consistency between certain variables in no-thread case\n- threads: fix the double CAS implementation for ARMv7\n- threads: Introduce double-width CAS on x86_64 and arm.\n- lua: possible CLOSE-WAIT state with '\\n' headers\n\nFor additional changes please refer to the changelog.\n","status":"published","published":"2018-10-19T12:59:02Z","modified":"2026-02-04T03:14:03.339633Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"USN-3780-1","title":"haproxy vulnerability","description":"It was discovered that HAProxy incorrectly handled certain requests.\nAn attacker could possibly use this issue to cause a denial of service.\n","status":"published","published":"2018-10-02T17:55:04Z","modified":"2026-02-10T04:41:26Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}