CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14

published December 12, 2018

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06593 · 93.8th percentile
Published
2018-12-12T17:00Z
EPSS history
Timeline
  • 12 DEC 17:00Z
    An issue was discovered in dns.c in HAProxy through 1.8.14
    cvelistv5