{"id":"CVE-2018-20103","aliases":["DEBIAN-CVE-2018-20103","DLA-3034-1","EUVD-2018-12673","GHSA-c9xx-94cr-x7xm","RHBA-2019:0326","RHSA-2019:1436","SUSE-SU-2019:0061-1","UBUNTU-CVE-2018-20103","USN-3858-1","openSUSE-SU-2019:0044-1","openSUSE-SU-2024:10839-1"],"status":"published","title":"An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,...","description":"An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06593,"percentile":0.93885,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2018-12-12T00:00:00Z","modified":"2026-10-23T18:03:04Z","fixes":[{"ecosystem":"Debian:12","package":"haproxy","fixed_in":["1.8.15-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"haproxy","fixed_in":["1.8.15-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"haproxy","fixed_in":["1.8.15-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"haproxy","fixed_in":["1.8.8-1ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.15-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.15-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.15-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-2+deb9u1"}]}],"versions":["1.7.5-2"],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.11.82-1.git.1673.133961e.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog-svcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.11.82-1.git.1673.133961e.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-cluster-autoscaler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.efb6af0.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-descheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.300.89765c9.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-dockerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.452.0ce6383.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hypershift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-metrics-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.52.2fdca3f.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node-problem-detector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.254.a448936.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.14.e353758.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-template-service-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.08bc31b.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-web-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.355.5e8b1d9.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-openshift-oauth-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.425.7cac034.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.3bf41ce.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.1063.48444e8.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.5027.9d24833.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.17-3.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"haproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.17-3.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"haproxy18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.17-3.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.150.2.1549032159-1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.1549642489-1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-3.git.0.9718d0a.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-3.git.0.9718d0a.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-playbooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-3.git.0.9718d0a.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-roles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-3.git.0.9718d0a.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-3.git.0.9718d0a.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-autoheal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.219.0b5aff4.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-cluster-capacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.380.cf11c51.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.5027.9d24833.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.0.3bf41ce.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-node-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.82-1.git.1063.48444e8.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-haproxy18-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.17-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-haproxy18-haproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.17-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-haproxy18-haproxy-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.17-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.15~git0.6b6a350a-3.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-1ubuntu0.3"}]}],"versions":["1.7.9-1ubuntu1","1.7.9-1ubuntu2","1.8.4-1","1.8.7-1","1.8.8-1","1.8.8-1ubuntu0.1","1.8.8-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-1ubuntu0.2"}]}],"versions":["1.5.14-1","1.5.15-1","1.6.2-1","1.6.2-2","1.6.2-2ubuntu1","1.6.2-2ubuntu3","1.6.3-1","1.6.3-1ubuntu0.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-1ubuntu0.3"}]}],"versions":["1.7.9-1ubuntu1","1.7.9-1ubuntu2","1.8.4-1","1.8.7-1","1.8.8-1","1.8.8-1ubuntu0.1","1.8.8-1ubuntu0.2"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4+git0.acb1d0bea-1.2"}]}],"bundled":9}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"haproxy","product":"haproxy"},{"vendor":"redhat","product":"openshift_container_platform"}],"references":[{"url":"http://www.securityfocus.com/bid/106280","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://usn.ubuntu.com/3858-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2019:0326","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=58df5aea0a0c926b2238f65908f5e9f83d1cca25","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHBA-2019:0327","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1436","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00045.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20103","tags":["advisory"]},{"url":"http://git.haproxy.org/?p=haproxy.git;a=commit;h=58df5aea0a0c926b2238f65908f5e9f83d1cca25"},{"url":"https://github.com/advisories/GHSA-c9xx-94cr-x7xm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-20103","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1634302","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1657019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1659194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1659441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1659653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1659976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1666820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1673178","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_0326.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658874","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20102","tags":["advisory"]},{"url":"https://www.mail-archive.com/haproxy@formilux.org/msg32055.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658876","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20103","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1663060","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20615","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20615","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1647059","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000865","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000866","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000866","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672865","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3826","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667566","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003000","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003000","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-01-08/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669505","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003001","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003001","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669508","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003002","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668345","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003003","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-01-16/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668736","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003004","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670292","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003010","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1095","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670296","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003011","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1102","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670298","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003012","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003012","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1201","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670299","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003013","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1204","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671324","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003014","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003014","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1253","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html-single/3.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1575585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1582635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649041","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1436.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11469","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190061-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1119368","tags":["report"]},{"url":"https://bugzilla.suse.com/1119419","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20103","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-20103","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3858-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-20102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20615","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TZXJ2LKYAOHD67OUI6IBBWM5LXXB753E/#TZXJ2LKYAOHD67OUI6IBBWM5LXXB753E","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-39240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-40346","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-20103","description":"An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.","status":"published","published":"2018-12-12T17:00:00Z","modified":"2024-08-05T11:51:18.927Z","updated_at":"2026-11-02T14:35:00.237825Z"}],"euvd":[{"id":"EUVD-2018-12673","description":"An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.","status":"published","published":"2018-12-12T17:00:00Z","modified":"2024-08-05T11:51:18Z","updated_at":"2026-11-03T02:39:31.9745Z"}],"ghsa":[{"id":"GHSA-c9xx-94cr-x7xm","title":"An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,...","description":"An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.","status":"published","published":"2022-05-13T01:50:57Z","modified":"2023-02-02T05:02:02Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:51:20.253646Z"}],"nvd":[{"id":"CVE-2018-20103","description":"An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.","status":"published","published":"2018-12-12T17:29:00.293Z","modified":"2026-06-17T01:52:17.373Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:04:50.99633Z"}],"osv":[{"id":"CVE-2018-20103","description":"An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.","status":"published","published":"2018-12-12T17:29:00.293Z","modified":"2026-03-15T22:25:56.735853Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:09.145458Z"},{"id":"DEBIAN-CVE-2018-20103","description":"An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.","status":"published","published":"2018-12-12T17:29:00.293Z","modified":"2026-10-23T18:03:04.67267721Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"RHBA-2019:0326","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix update","status":"published","published":"2024-09-16T02:09:18Z","modified":"2026-08-05T10:05:51Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2019:1436","title":"Red Hat Security Advisory: rh-haproxy18-haproxy security, bug fix, and enhancement update","status":"published","published":"2024-09-13T16:55:54Z","modified":"2026-06-28T10:30:10Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2018-20103","description":"An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.","status":"published","published":"2018-12-12T00:00:00Z","modified":"2026-02-04T04:01:24.246377Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.91743Z"},{"id":"DLA-3034-1","title":"haproxy - security update","status":"published","published":"2022-05-30T00:00:00Z","modified":"2026-03-09T01:21:29.239625Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2019:0044-1","title":"Security update for haproxy","description":"This update for haproxy to version 1.8.15 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-20102: Fixed an out-of-bounds read in dns_validate_dns_response(),\n  which allowed for memory disclosure (bsc#1119368)\n- CVE-2018-20103: Fixed an infinite recursion via crafted packet allows stack\n  exhaustion and denial of service (bsc#1119419)\n\nOther notable bug fixes:\n\n- Fix off-by-one write in dns_validate_dns_response()\n- Fix out-of-bounds read via signedness error in dns_validate_dns_response()\n- Prevent out-of-bounds read in dns_validate_dns_response()\n- Prevent out-of-bounds read in dns_read_name()\n- Prevent stack-exhaustion via recursion loop in dns_read_name\n\nFor a full list of changes, please refer to:\n  https://www.haproxy.org/download/1.8/src/CHANGELOG\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T10:45:51Z","modified":"2026-02-04T03:57:13.294021Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10839-1","title":"haproxy-2.4.4+git0.acb1d0bea-1.2 on GA media","description":"These are all security issues fixed in the haproxy-2.4.4+git0.acb1d0bea-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:00:47.357107Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:0061-1","title":"Security update for haproxy","description":"This update for haproxy to version 1.8.15 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-20102: Fixed an out-of-bounds read in dns_validate_dns_response(),\n  which allowed for memory disclosure (bsc#1119368)\n- CVE-2018-20103: Fixed an infinite recursion via crafted packet allows stack\n  exhaustion and denial of service (bsc#1119419)\n\nOther notable bug fixes:\n\n- Fix off-by-one write in dns_validate_dns_response()\n- Fix out-of-bounds read via signedness error in dns_validate_dns_response()\n- Prevent out-of-bounds read in dns_validate_dns_response()\n- Prevent out-of-bounds read in dns_read_name()\n- Prevent stack-exhaustion via recursion loop in dns_read_name\n\nFor a full list of changes, please refer to:\n  https://www.haproxy.org/download/1.8/src/CHANGELOG\n","status":"published","published":"2019-01-10T15:33:37Z","modified":"2026-02-04T04:10:07.556457Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3858-1","title":"haproxy vulnerabilities","description":"It was discovered that HAProxy incorrectly handled certain requests.\nAn attacker could possibly use this to expose sensitive information.\n(CVE-2018-20102)\n\nIt was discovered that HAProxy incorrectly handled certain requests.\nA attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10.\n(CVE-2018-20103, CVE-2018-20615)\n","status":"published","published":"2019-01-15T11:37:38Z","modified":"2026-02-10T04:41:28Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}