RHSA-2020:1936MediumCVSS 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.4.3 haproxy security update

Published
May 4, 2020
Last Modified
June 26, 2026

🔗 CVE IDs covered (3)

CVE-2019-18277 →CVE-2019-19330 →CVE-2020-11100 →

📋 Description

CVE-2019-18277 — haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value CVE-2019-19330 — haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks CVE-2020-11100 — haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes

🔗 References (6)