CVE:CVE-2018-14645
CNNVD:CNNVD-201809-1083
HAProxy是法国HAProxy公司的一款开源的TCP/HTTP负载均衡服务器。该服务器提供4层、7层代理，并能支持上万级别的连接，具有高效、稳定等特点。HPACK decoder是其中的一个HPACK（HTTP2头部压缩算法）解码器。
HAProxy 1.8.14之前版本中的HPACK decoder的‘hpack_valid_idx()’函数存在越界读取漏洞。远程攻击者可利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade haproxy haproxy to a higher version than 1.8.14,and avoid the version (,1.8.14]; Upgrade canonical ubuntu_linux to a higher version than 18.04,and avoid the version 18.04; Upgrade redhat openshift to a higher version than 3.10,and avoid the version 3.10; Upgrade redhat openshift_container_platform to a higher version than 3.9,and avoid the version 3.9; Upgrade redhat enterprise_linux to a higher version than 7.0,7.3,7.4,7.5,7.6,and avoid the version 7.0,7.3,7.4,7.5,7.6