CVE-2018-14645

Name of the Vulnerable Software and Affected Versions HAProxy versions prior to 1.8.14

Description The issue is related to an out-of-bounds read access in the HPACK decoder of HAProxy, which can be exploited by a remote attacker to cause a denial of service. This is due to a flaw in the hpack valid idx() function.

Recommendations For versions prior to 1.8.14, update to version 1.8.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the HTTP/2 protocol until the update is applied.