https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 00:40:11 +0000 https://vulnerability.circl.lu/vuln/cve-2019-19330 <p>The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.</p> <p>The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.</p> https://vulnerability.circl.lu/vuln/cve-2019-19330 https://vulnerability.circl.lu/vuln/usn-4212-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: haproxy</p> <p>Tim Düsterhus discovered that HAProxy incorrectly handled certain HTTP/2 headers. An attacker could possibly use this issue to execute arbitrary code through CRLF injection.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: haproxy</p> <p>Tim Düsterhus discovered that HAProxy incorrectly handled certain HTTP/2 headers. An attacker could possibly use this issue to execute arbitrary code through CRLF injection.</p> https://vulnerability.circl.lu/vuln/usn-4212-1