CVEs-PoC/2020/CVE-2020-11100.md

CVE-2020-11100

Description

In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.

POC

Reference

• http://packetstormsecurity.com/files/157323/haproxy-hpack-tbl.c-Out-Of-Bounds-Write.html

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/Live-Hack-CVE/CVE-2020-11100