Lucene search

CVE-2021-39242

🗓️ 17 Aug 2021 18:00:33Reported by mitreType

An issue discovered in HAProxy 2.2, 2.3, and 2.4 versions allows attacker-controlled HTTP Host header leading to mishandled mismatch between Host and authority

Reporter	Title	Published	Views	Family All 41
Prion	Design/Logic Flaw	17 Aug 202119:15	–	prion
Prion	Design/Logic Flaw	11 Apr 202220:15	–	prion
OSV	CVE-2021-39242	17 Aug 202119:15	–	osv
OSV	BIT-haproxy-2021-39242	6 Mar 202410:54	–	osv
OSV	haproxy - security update	17 Aug 202100:00	–	osv
OSV	Red Hat Security Advisory: OpenShift Container Platform 4.9.6 packages and security update	16 Sep 202406:48	–	osv
OSV	Red Hat Security Advisory: OpenShift Container Platform 4.8.25 security update	16 Sep 202406:48	–	osv
CVE	CVE-2021-39242	17 Aug 202119:15	–	cve
CVE	CVE-2021-4047	11 Apr 202220:15	–	cve
Debian CVE	CVE-2021-39242	17 Aug 202119:15	–	debiancve

Source	Link
mail-archive	www.mail-archive.com/haproxy%40formilux.org/msg41041.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RPNY4WZIQUAUOCLIMUPC37AQWNXTWIQM/
git	www.git.haproxy.org/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ALECUZDIMT5FYGP6V6PVSI4BKVZTZWN/
debian	www.debian.org/security/2021/dsa-4960

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Aug 2021 18:33Current

7.7High risk

Vulners AI Score7.7

EPSS0.007