CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.

Score
CVSS 3.0 7.5 High
Status
Modified - cve@mitre.org
Published
2018-12-12
Last modified
2024-08-05
Weaknesses
CWE-835

Affected products

References

 
 
© AVABIS GmbH privacypolicy about