Lucene search

[email protected]NVD:CVE-2023-0056

HistoryMar 23, 2023 - 9:15 p.m.

CVE-2023-0056

2023-03-2321:15:19

CWE-400

[email protected]

web.nvd.nist.gov

vulnerability

haproxy

openshift

availability

resource consumption

authenticated remote attacker

malicious server

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

46.6%

JSON

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.

Affected configurations

Nvd

Node

haproxyhaproxyMatch-

redhatceph_storageMatch5.0

redhatsoftware_collectionsMatch-

Node

redhatenterprise_linuxMatch9.0

AND

redhatopenshift_container_platformMatch4.12

redhatopenshift_container_platform_for_ibm_linuxoneMatch4.12

redhatopenshift_container_platform_for_powerMatch4.12

redhatopenshift_container_platform_ibm_z_systemsMatch4.12

Node

redhatopenshift_container_platformMatch4.10arm64

redhatopenshift_container_platformMatch4.11arm64

redhatopenshift_container_platformMatch4.12arm64

Node

redhatenterprise_linuxMatch8.0

AND

redhatopenshift_container_platformMatch4.10

redhatopenshift_container_platform_for_ibm_linuxoneMatch4.10

redhatopenshift_container_platform_for_powerMatch4.10

redhatopenshift_container_platform_ibm_z_systemsMatch4.10

Node

redhatenterprise_linuxMatch8.0

AND

redhatopenshift_container_platformMatch4.11

redhatopenshift_container_platform_for_ibm_linuxoneMatch4.11

redhatopenshift_container_platform_for_powerMatch4.11

redhatopenshift_container_platform_ibm_z_systemsMatch4.11

Node

redhatenterprise_linuxMatch8.0

AND

redhatopenshift_container_platformMatch4.12

redhatopenshift_container_platform_for_ibm_linuxoneMatch4.12

redhatopenshift_container_platform_for_powerMatch4.12

redhatopenshift_container_platform_ibm_z_systemsMatch4.12

Node

fedoraprojectextra_packages_for_enterprise_linuxMatch8.0

fedoraprojectfedoraMatch36

fedoraprojectfedoraMatch37

VendorProductVersionCPE
haproxyhaproxy-cpe:2.3:a:haproxy:haproxy:-:*:*:*:*:*:*:*
redhatceph_storage5.0cpe:2.3:a:redhat:ceph_storage:5.0:*:*:*:*:*:*:*
redhatsoftware_collections-cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:*
redhatenterprise_linux9.0cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
redhatopenshift_container_platform4.12cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*
redhatopenshift_container_platform_for_ibm_linuxone4.12cpe:2.3:a:redhat:openshift_container_platform_for_ibm_linuxone:4.12:*:*:*:*:*:*:*
redhatopenshift_container_platform_for_power4.12cpe:2.3:a:redhat:openshift_container_platform_for_power:4.12:*:*:*:*:*:*:*
redhatopenshift_container_platform_ibm_z_systems4.12cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.12:*:*:*:*:*:*:*
redhatopenshift_container_platform4.10cpe:2.3:a:redhat:openshift_container_platform:4.10:*:*:*:*:*:arm64:*
redhatopenshift_container_platform4.11cpe:2.3:a:redhat:openshift_container_platform:4.11:*:*:*:*:*:arm64:*

Vendor	Product	Version	CPE
haproxy	haproxy	-	cpe:2.3:a:haproxy:haproxy:-:::::::*
redhat	ceph_storage	5.0	cpe:2.3:a:redhat:ceph_storage:5.0:::::::*
redhat	software_collections	-	cpe:2.3:a:redhat:software_collections:-:::::::*
redhat	enterprise_linux	9.0	cpe:2.3:o:redhat:enterprise_linux:9.0:::::::*
redhat	openshift_container_platform	4.12	cpe:2.3:a:redhat:openshift_container_platform:4.12:::::::*
redhat	openshift_container_platform_for_ibm_linuxone	4.12	cpe:2.3:a:redhat:openshift_container_platform_for_ibm_linuxone:4.12:::::::*
redhat	openshift_container_platform_for_power	4.12	cpe:2.3:a:redhat:openshift_container_platform_for_power:4.12:::::::*
redhat	openshift_container_platform_ibm_z_systems	4.12	cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.12:::::::*
redhat	openshift_container_platform	4.10	cpe:2.3:a:redhat:openshift_container_platform:4.10::::::arm64:
redhat	openshift_container_platform	4.11	cpe:2.3:a:redhat:openshift_container_platform:4.11::::::arm64: