Known vulnerabilities in rh-haproxy18-haproxy (Red Hat package)

Vendor: Red Hat Inc.

Software CPE: cpe:2.3:o:red_hat:rh-haproxy18-haproxy_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU26549 - Heap-based Buffer Overflow CVE-2020-11100	CWE-122	High	No	No	1.8.17-1.el7	02.04.2020	SB2020040219 SB2020040220 SB2020040221 and 13 more
#VU23084 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2019-19330	CWE-93	Medium	No	No	1.8.24-2.el7	28.11.2019	SB2019112812 SB2019112813 SB2019120422 and 7 more
#VU22597 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2019-18277	CWE-444	Medium	No	No	1.8.24-2.el7	07.11.2019	SB2019110721 SB2019110722 SB2019120408 and 6 more
#VU17107 - Out-of-bounds read CVE-2018-20615	CWE-125	Medium	No	No	1.8.4-4.el7	22.01.2019	SB2019012202 SB2019011509 SB2019021406 and 3 more
#VU16548 - Out-of-bounds read CVE-2018-20102	CWE-125	Low	No	No	1.8.17-1.el7	14.12.2018	SB2018121409 SB2019011302 SB2019011509 and 4 more
#VU16547 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-20103	CWE-835	Low	No	No	1.8.17-1.el7	14.12.2018	SB2018121409 SB2019011302 SB2019011509 and 4 more
#VU13126 - Exposure of sensitive information to an unauthorized actor CVE-2018-11469	CWE-200	Low	No	No	1.8.17-1.el7	31.05.2018	SB2018060109 SB2018102311 SB2019061124 and 1 more