Lucene search

K
cvelistMitreCVELIST:CVE-2019-19330
HistoryNov 27, 2019 - 3:53 p.m.

CVE-2019-19330

2019-11-2715:53:26
mitre
www.cve.org
7

AI Score

9.3

Confidence

High

EPSS

0.022

Percentile

89.4%

The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.