CVE-2019-14243

headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, allows remote attackers to cause a denial of service (webserver panic and daemon crash) via a crafted HAProxy PROXY v2 request with truncated source/destination address data.

• CWE-20

• https://caddy.community/t/dos-in-http-proxyprotocol-plugin/6014Third Party Advisory
• https://github.com/mastercactapus/caddy-proxyprotocol/issues/8Issue Tracking, Third Party Advisory
• https://github.com/mastercactapus/proxyprotocol/commit/5c4a101121fc3e868026189c7a73f7f19eef90acPatch, Third Party Advisory
• https://github.com/mastercactapus/proxyprotocol/compare/ef496d7...5c4a101Third Party Advisory
• https://github.com/mastercactapus/proxyprotocol/issues/1Exploit, Third Party Advisory
• https://github.com/mastercactapus/proxyprotocol/releases/tag/v0.0.2Release Notes, Third Party Advisory
• https://caddy.community/t/dos-in-http-proxyprotocol-plugin/6014Third Party Advisory
• https://github.com/mastercactapus/caddy-proxyprotocol/issues/8Issue Tracking, Third Party Advisory
• https://github.com/mastercactapus/proxyprotocol/commit/5c4a101121fc3e868026189c7a73f7f19eef90acPatch, Third Party Advisory
• https://github.com/mastercactapus/proxyprotocol/compare/ef496d7...5c4a101Third Party Advisory
• https://github.com/mastercactapus/proxyprotocol/issues/1Exploit, Third Party Advisory
• https://github.com/mastercactapus/proxyprotocol/releases/tag/v0.0.2Release Notes, Third Party Advisory

Published

Jul 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14238On STMicroelectronics STM32F7 devices, Proprietary Code Read…6.6
• CVE-2019-14239On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, …6.6
• CVE-2019-1424A security feature bypass vulnerability exists when Windows …8.1
• CVE-2019-14240WCMS v0.3.2 has a CSRF vulnerability, with resultant directo…
• CVE-2019-14241HAProxy through 2.0.2 allows attackers to cause a denial of …
• CVE-2019-14242An issue was discovered in Bitdefender products for Windows …
• CVE-2019-14245In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851,…6.5
• CVE-2019-14246In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851,…6.5
• CVE-2019-14247The scan() function in mad.c in mpg321 0.3.2 allows remote a…
• CVE-2019-14248In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma…
• CVE-2019-14249dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allow…
• CVE-2019-1425An elevation of privilege vulnerability exists when Visual S…6.5