Lucene search

K
oraclelinuxOracleLinuxELSA-2024-1142
HistoryMar 06, 2024 - 12:00 a.m.

haproxy security update

2024-03-0600:00:00
linux.oracle.com
7
haproxy
update
2.4.22-3
2.4.22-2
mitigate
cve-2023-45539
cve-2023-40225
vulnerabilities
security

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.0%

[2.4.22-3]

  • Reject ‘#’ as part of URI path component (CVE-2023-45539, RHEL-18169)
    [2.4.22-2]
  • Reject any empty content-length header value (CVE-2023-40225, RHEL-7736)

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.0%