Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.
CVSS Information
N/A
Vulnerability Type
跨界内存读
Vulnerability Title
HAProxy HPACK decoder 缓冲区错误漏洞
Vulnerability Description
HAProxy是法国HAProxy公司的一款开源的TCP/HTTP负载均衡服务器。该服务器提供4层、7层代理，并能支持上万级别的连接，具有高效、稳定等特点。HPACK decoder是其中的一个HPACK（HTTP2头部压缩算法）解码器。 HAProxy 1.8.14之前版本中的HPACK decoder的‘hpack_valid_idx()’函数存在越界读取漏洞。远程攻击者可利用该漏洞造成拒绝服务（崩溃）。
CVSS Information
N/A
Vulnerability Type
N/A