Out-Of-Bounds Read in HAProxy Affects DNS Response Validation

CVE-2018-20102

What is CVE-2018-20102?

An out-of-bounds read vulnerability exists in HAProxy's DNS validation function, specifically in the dns_validate_dns_response within dns.c. This issue arises from insufficient checks during the validation process of DNS responses. As a result, remote attackers could potentially exploit this vulnerability to read 16 bytes associated with an AAAA record from uninitialized memory. This could allow them to access sensitive data left on the stack or even exceed the designated buffer limits, depending on the size of the accepted payload.

References