SB2019011509 - Ubuntu update for HAProxy

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Out-of-bounds read (CVE-ID: CVE-2018-20102)

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The vulnerability exists due to improper checking of valid DNS responses by the dns_validate_dns_response function, as defined in the dns.c source code file. A remote attacker can send a specially crafted request that submits malicious input, trigger an out-of-bounds read access and obtain sensitive information.

2) Infinite loop (CVE-ID: CVE-2018-20103)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists in the dns_read_name() function, as defined in the src/dns.c source code file due to an error when processing malicious input. A remote attacker can send a specially crafted packet that submits malicious input, make a compressed pointer point to itself trigger an infinite loop and cause the affected software to crash.

3) Out-of-bounds read (CVE-ID: CVE-2018-20615)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect frame length validation when processing headers with priority flags set. A remote attacker can send a specially crafted HTTP/2 request, trigger our-of-bounds read and crash the affected application.

Remediation

Install update from vendor's website.

References

• https://usn.ubuntu.com/3858-1/