[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNcpfFo40tCxxy1cs9OxlavT0rh6HHcU3UJOi78EVRjQ":3,"g5a-risk:CVE-2020-11100":244},{"success":4,"data":5,"meta":242},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":82,"references":83,"referencesCount":142,"weaknesses":143,"weaknessesCount":152,"isActivelyExploited":153,"cisaInfo":26,"otxData":26,"relatedBlogPosts":154,"seoMetadata":155,"configurations":180,"relatedVendorCves":226,"notableEvents":227},"CVE-2020-11100","What is CVE-2020-11100?","In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP\u002F2 request, possibly causing remote code execution.","In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain...","2020-04-02T15:15:17.483","2023-11-07T03:14:30.167",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.61593,[40,40,40,40,40,40,40],"High",[44,48,53,58,61,66,69,74,77],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"haproxy","*","cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"redhat","openshift_container_platform","3.11","cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":59,"criteria":60,"vulnerable":4},"4.0","cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":64,"criteria":65,"vulnerable":4},"fedoraproject","fedora","30","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":67,"criteria":68,"vulnerable":4},"31","cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",{"vendor":70,"product":71,"version":72,"criteria":73,"vulnerable":4},"canonical","ubuntu_linux","18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":70,"product":71,"version":75,"criteria":76,"vulnerable":4},"19.10","cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",{"vendor":78,"product":79,"version":80,"criteria":81,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",9,[84,90,95,100,105,109,112,116,120,123,127,131,134,138],{"url":85,"source":86,"tags":87},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-04\u002Fmsg00002.html","Opensuse",[88,89],"Mailing List","Third Party Advisory",{"url":91,"source":92,"tags":93},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F157323\u002Fhaproxy-hpack-tbl.c-Out-Of-Bounds-Write.html","Packetstormsecurity",[89,94],"VDB Entry",{"url":96,"source":97,"tags":98},"http:\u002F\u002Fwww.haproxy.org","Haproxy",[99],"Vendor Advisory",{"url":101,"source":102,"tags":103},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1819111","Red Hat",[104,89],"Issue Tracking",{"url":106,"source":107,"tags":108},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1168023","Suse",[104,89],{"url":110,"source":97,"tags":111},"https:\u002F\u002Fgit.haproxy.org\u002F?p=haproxy.git%3Ba=commit%3Bh=5dfc5d5cd0d2128d77253ead3acf03a421ab5b88",[],{"url":113,"source":114,"tags":115},"https:\u002F\u002Flists.debian.org\u002Fdebian-security-announce\u002F2020\u002Fmsg00052.html","Debian",[88,89],{"url":117,"source":118,"tags":119},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F264C7UL3X7L7QE74ZJ557IOUFS3J4QQC\u002F","Fedoraproject",[],{"url":121,"source":118,"tags":122},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FMNW5RZLIX7LOXRLV7WMHX22CI43XSXKW\u002F",[],{"url":124,"source":125,"tags":126},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202012-22","Gentoo",[89],{"url":128,"source":129,"tags":130},"https:\u002F\u002Fusn.ubuntu.com\u002F4321-1\u002F","Ubuntu",[89],{"url":132,"source":114,"tags":133},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4649",[89],{"url":135,"source":97,"tags":136},"https:\u002F\u002Fwww.haproxy.org\u002Fdownload\u002F2.1\u002Fsrc\u002FCHANGELOG",[137,99],"Release Notes",{"url":139,"source":140,"tags":141},"https:\u002F\u002Fwww.mail-archive.com\u002Fhaproxy%40formilux.org\u002Fmsg36876.html","Mail-archive",[],14,[144],{"id":145,"name":146,"description":147,"extendedDescription":148,"status":149,"abstraction":150,"structure":151},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":156,"metaDescription":157,"keywords":158,"canonicalUrl":159,"structuredData":160},"What is CVE-2020-11100? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-11100, a high severity cyber security vulnerability from 2020. High exploit probability (61.6%). In hpack_dht_insert in hp...","CVE-2020-11100, CVE-2020-11100 vulnerability, CVE-2020-11100 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, haproxy security, debian security, redhat security, fedoraproject security, canonical security, opensuse security, haproxy vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2020-11100",{"@context":161,"@type":162,"headline":156,"description":157,"datePublished":10,"dateModified":11,"author":163,"publisher":167,"about":171,"mainEntityOfPage":175,"articleSection":178,"keywords":179},"https:\u002F\u002Fschema.org","TechArticle",{"@type":164,"name":165,"url":166},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":164,"name":165,"url":166,"logo":168},{"@type":169,"url":170},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":172,"name":6,"description":173,"additionalType":174},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":176,"@id":177},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-11100","Cybersecurity","CVE-2020-11100, CVE-2020-11100 vulnerability, CVE-2020-11100 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[181,190,196,204,212,220],{"Operator":26,"Negate":26,"Nodes":182},[183],{"Operator":184,"Negate":26,"CPEMatch":185},"OR",[186],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":187,"VersionStartExcluding":26,"VersionStartIncluding":188,"VersionEndExcluding":189,"VersionEndIncluding":26},"2876323F-F324-48B3-BD7D-D559EA0E856E","1.8.0","2.1.4",{"Operator":26,"Negate":26,"Nodes":191},[192],{"Operator":184,"Negate":26,"CPEMatch":193},[194],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":26,"Negate":26,"Nodes":197},[198],{"Operator":184,"Negate":26,"CPEMatch":199},[200,202],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2F87326E-0B56-4356-A889-73D026DB1D4B",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"932D137F-528B-4526-9A89-CD59FA1AB0FE",{"Operator":26,"Negate":26,"Nodes":205},[206],{"Operator":184,"Negate":26,"CPEMatch":207},[208,210],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":211,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"80F0FA5D-8D3B-4C0E-81E2-87998286AF33",{"Operator":26,"Negate":26,"Nodes":213},[214],{"Operator":184,"Negate":26,"CPEMatch":215},[216,218],{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":217,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A31C8344-3E02-4EB8-8BD8-4C84B7959624",{"Operator":26,"Negate":26,"Nodes":221},[222],{"Operator":184,"Negate":26,"CPEMatch":223},[224],{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",[],[228,235],{"id":229,"eventType":230,"eventTime":231,"details":232,"label":233,"color":234},"1c906fff-dd98-4123-a5bf-9a6e15bb60a3","LOW_EPSS_DELTA","2025-07-02T04:11:43.452064+00:00","Daily EPSS score decreased by 0.344 on 2023-12-30","EPSS Score Decreased","green",{"id":236,"eventType":237,"eventTime":238,"details":239,"label":240,"color":241},"1b8e59fe-5285-4a5a-8bc8-675f778a05e1","HIGH_EPSS_DELTA","2025-07-05T04:05:43.434509+00:00","Daily EPSS score increased by 0.344 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":243,"version":32},1792264462829,{"score":245,"band":246,"action":247,"scoredAt":248},62,"Medium","Plan remediation","2026-10-16T06:48:13.249866+00:00"]