Lucene search

K
cvelistMitreCVELIST:CVE-2020-11100
HistoryApr 02, 2020 - 2:23 p.m.

CVE-2020-11100

2020-04-0214:23:05
mitre
raw.githubusercontent.com
2

8.8 High

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.6%

In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.