RHSA-2020:1289 Red Hat Security Advisory: haproxy security update

🗓️ 13 Sep 2024 22:02:17Reported by GoogleType

osv

osv🔗 osv.dev👁 17 Views

Security update for haprox

Reporter	Title	Published	Views	Family All 97
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	9 Jan 202420:27	–	ibm
IBM Security Bulletins	Security Bulletin: HAProxy vulnerability CVE-2020-11100 impacts IBM Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint versions prior to V4.0	10 Dec 202023:21	–	ibm
FreeBSD	HAproxy -- serious vulnerability affecting the HPACK decoder used for HTTP/2	2 Apr 202000:00	–	freebsd
ATTACKERKB	CVE-2020-11100	2 Apr 202000:00	–	attackerkb
Tenable Nessus	Amazon Linux 2 : haproxy2 (ALASHAPROXY2-2023-006)	27 Sep 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0043: haproxy (ALINUX3-SA-2022:0043)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : haproxy (CESA-2020:1288)	1 Feb 202100:00	–	nessus
Tenable Nessus	Debian DSA-4649-1 : haproxy - security update	14 Apr 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : haproxy (EulerOS-SA-2020-1580)	26 May 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : haproxy (EulerOS-SA-2020-1709)	25 Jun 202000:00	–	nessus

Source	Link
access	www.access.redhat.com/errata/RHSA-2020:1289
access	www.access.redhat.com/security/updates/classification/
access	www.access.redhat.com/security/vulnerabilities/haproxy
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1289.json
access	www.access.redhat.com/security/cve/CVE-2020-11100
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-11100
bugs	www.bugs.chromium.org/p/project-zero/issues/detail
haproxy	www.haproxy.com/blog/haproxy-1-8-http-2-hpack-decoder-vulnerability-fixed/

22 Nov 2025 11:58Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

EPSS0.74396

red hat security advisory haproxy