CVE:CVE-2020-11100
CNNVD:CNNVD-202004-069
HAProxy是法国HAProxy公司的一款开源的TCP/HTTP负载均衡服务器。该服务器提供4层、7层代理，并能支持上万级别的连接，具有高效、稳定等特点。
HAProxy 1.8版本至2.x版本（2.1.4版本已修复）中的HPACK解码器的hpack-tbl.c文件的hpack_dht_insert存在安全漏洞。远程攻击者可借助特制的HTTP/2请求利用该漏洞执行代码。
solution:Upgrade haproxy haproxy to a higher version than 2.1.4,and avoid the version [1.8.0,2.1.4); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade redhat openshift_container_platform to a higher version than 3.11,4.0,and avoid the version 3.11,4.0; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade canonical ubuntu_linux to a higher version than 18.04,19.10,and avoid the version 18.04,19.10; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1