What is RHSA-2020:1287?

RHSA-2020:1287 is a security advisory published by Red Hat Product Security with Critical severity. Red Hat Security Advisory: OpenShift Container Platform 3.11 security update

Which CVE IDs does RHSA-2020:1287 cover?

RHSA-2020:1287 covers the following CVE IDs: CVE-2019-18277, CVE-2019-19330, CVE-2020-11100. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2020:1287?

RHSA-2020:1287 has a CVSS v3 base score of 8.8, published by Red Hat Product Security.

RHSA-2020:1287CriticalCVSS 8.8

Red Hat Security Advisory: OpenShift Container Platform 3.11 security update

Vendor

Red Hat Product Security

Published

April 7, 2020

Last Modified

June 26, 2026

🔗 CVE IDs covered (3)

CVE-2019-18277 →CVE-2019-19330 →CVE-2020-11100 →

📋 Description

CVE-2019-18277 — haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value CVE-2019-19330 — haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks CVE-2020-11100 — haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2020:1287
externalhttps://access.redhat.com/security/updates/classification/#critical
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1759697
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1777584
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1819111
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1287.json