Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/rh-haproxy18-haproxy@1.8.17-1?arch=el7
purl pkg:rpm/redhat/rh-haproxy18-haproxy@1.8.17-1?arch=el7
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.4
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-31wf-mpnt-dycm
Aliases:
CVE-2018-20102
haproxy: Out-of-bounds read in dns.c:dns_validate_dns_response() allows for memory disclosure There are no reported fixed by versions.
VCID-48er-rqvk-nyhg
Aliases:
CVE-2018-20103
haproxy: Infinite recursion via crafted packet allows stack exhaustion and denial of service There are no reported fixed by versions.
VCID-9atw-pg8b-y3a2
Aliases:
CVE-2018-11469
haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:24:35.815336+00:00 RedHat Importer Affected by VCID-9atw-pg8b-y3a2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11469.json 38.0.0
2026-04-01T14:21:26.534050+00:00 RedHat Importer Affected by VCID-48er-rqvk-nyhg https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20103.json 38.0.0
2026-04-01T14:21:26.187897+00:00 RedHat Importer Affected by VCID-31wf-mpnt-dycm https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20102.json 38.0.0