CVE-2019-14243
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.3%
headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, allows remote attackers to cause a denial of service (webserver panic and daemon crash) via a crafted HAProxy PROXY v2 request with truncated source/destination address data.
Produtos afetados
n/a · n/aReferências
https://caddy.community/t/dos-in-http-proxyprotocol-plugin/6014https://github.com/mastercactapus/caddy-proxyprotocol/issues/8https://github.com/mastercactapus/proxyprotocol/commit/5c4a101121fc3e868026189c7a73f7f19eef90achttps://github.com/mastercactapus/proxyprotocol/compare/ef496d7...5c4a101https://github.com/mastercactapus/proxyprotocol/issues/1https://github.com/mastercactapus/proxyprotocol/releases/tag/v0.0.2