CVE-2018-20615

An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame.

• CWE-125

• http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00018.htmlMailing List, Third Party Advisory
• http://www.securityfocus.com/bid/106645Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHBA-2019:0327Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:0275Third Party Advisory
• https://usn.ubuntu.com/3858-1/Third Party Advisory
• https://www.mail-archive.com/haproxy%40formilux.org/msg32304.html
• http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00018.htmlMailing List, Third Party Advisory
• http://www.securityfocus.com/bid/106645Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHBA-2019:0327Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:0275Third Party Advisory
• https://usn.ubuntu.com/3858-1/Third Party Advisory
• https://www.mail-archive.com/haproxy%40formilux.org/msg32304.html

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-2061Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20610imcat 4.4 allows directory traversal via the root/run/adm.ph…
• CVE-2018-20611imcat 4.4 allow XSS via a crafted cookie to the root/tools/a…
• CVE-2018-20612UWA 2.3.11 allows index.php?g=admin&c=admin&a=add_admin_do C…
• CVE-2018-20613TEMMOKU T1.09 Beta allows admin/user/add CSRF.
• CVE-2018-20614public\install\install.php in CIM 0.9.3 allows remote attack…
• CVE-2018-20616ok-file-formats through 2018-10-16 has a heap-based buffer o…
• CVE-2018-20617ok-file-formats through 2018-10-16 has a heap-based buffer o…
• CVE-2018-20618ok-file-formats through 2018-10-16 has a heap-based buffer o…8.8
• CVE-2018-2062Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20621An issue was discovered in Microvirt MEmu 6.0.6. The MemuSer…
• CVE-2018-20622JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libj…6.5