Lucene search

CVE-2021-40346

🗓️ 08 Sep 2021 17:12:15Reported by [email protected]Type

An integer overflow exists in HAProxy 2.0 through 2.5, allowing HTTP request smuggling attac

Reporter	Title	Published	Views	Family All 75
OSV	haproxy - security update	7 Sep 202100:00	–	osv
OSV	CVE-2021-40346	8 Sep 202117:15	–	osv
OSV	BIT-haproxy-2021-40346	6 Mar 202410:54	–	osv
OSV	haproxy vulnerabilities	8 Sep 202111:06	–	osv
OSV	Red Hat Security Advisory: OpenShift Container Platform 4.6.53 security update	16 Sep 202406:48	–	osv
OSV	Red Hat Security Advisory: OpenShift Container Platform 4.7.41 security update	16 Sep 202406:48	–	osv
OSV	Red Hat Security Advisory: OpenShift Container Platform 4.8.25 security update	16 Sep 202406:48	–	osv
OSV	Red Hat Security Advisory: OpenShift Container Platform 4.9.6 packages and security update	16 Sep 202406:48	–	osv
OSV	haproxy-2.4.4+git0.acb1d0bea-1.2 on GA media	15 Jun 202400:00	–	osv
GithubExploit	Exploit for Integer Overflow or Wraparound in Haproxy	24 Jan 202222:16	–	githubexploit

Nvd

Node

haproxy haproxyRange2.0.0–2.0.25

haproxy haproxyRange2.2.0–2.2.17

haproxy haproxyRange2.3.0–2.3.14

haproxy haproxyRange2.4.0–2.4.4

haproxy haproxyMatch2.5dev0

haproxy haproxyMatch2.5dev1

haproxy haproxyMatch2.5dev2

haproxy haproxyMatch2.5dev3

haproxy haproxyMatch2.5dev4

haproxy haproxyMatch2.5dev5

haproxy haproxyMatch2.5dev6

Node

debian debian_linuxMatch11.0

Node

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

Source	Link
mail-archive	www.mail-archive.com/haproxy%40formilux.org
mail-archive	www.mail-archive.com/haproxy%40formilux.org/msg41114.html
jfrog	www.jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/
github	www.github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95
debian	www.debian.org/security/2021/dsa-4968
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A7V2IYO22LWVBGUNZWVKNTMDV4KINLFO/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXTSBY2TEAXWZVFQM3CXHJFRONX7PEMN/
lists	www.lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120%40%3Cdev.cloudstack.apache.org%3E
lists	www.lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a%40%3Cdev.cloudstack.apache.org%3E
git	www.git.haproxy.org/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Sep 2021 17:15Current

CVSS25.0

CVSS37.5

EPSS0.019

CWE-190