Alerts This Week
Warning Icon 1 1,139
Alerts This Week
Warning Icon 1 1,139

Ubuntu 19.10 and 18.04 LTS: 4321-1 Moderate: HAProxy Code Execution

ubuntu
Calendar Grey April 7, 2020
Dist Ubuntu Esm H88
Ubuntu Security Advisory USN-4321-1: HAProxy vulnerability permits arbitrary code execution through specially crafted HTTP/2 requests.
HAProxy could be made to execute arbitrary code if it received a specially crafted HTTP/2 request.

Summary

HAProxy could be made to execute arbitrary code if it received a specially crafted HTTP/2 request.

Software Description:

- haproxy: fast and reliable load balancing reverse proxy

Details:

Felix Wilhelm discovered that HAProxy incorrectly handled certain HTTP/2 requests.

An attacker could possibly use this to execute arbitrary code.

Topics%20covered

Topics Covered

security advisory security issue code execution arbitrary code ubuntu HAProxy HTTP/2 request

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  haproxy                         2.0.5-1ubuntu0.4

Ubuntu 18.04 LTS:
  haproxy                         1.8.8-1ubuntu0.10

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4321-1

CVE-2020-11100

April 07, 2020

Topics%20covered

Topics Covered

security advisory security issue code execution arbitrary code ubuntu HAProxy HTTP/2 request

Package Information

https://launchpad.net/ubuntu/+source/haproxy/2.0.5-1ubuntu0.4
https://launchpad.net/ubuntu/+source/haproxy/1.8.8-1ubuntu0.10

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here