Lucene search

K
osvGoogleOSV:USN-6294-2
HistoryAug 17, 2023 - 2:53 p.m.

haproxy vulnerability

2023-08-1714:53:13
Google
osv.dev
6
haproxy
vulnerability
ubuntu 20.04
content-length headers
remote attacker

7.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

USN-6294-1 fixed vulnerabilities in HAProxy. This update provides the
corresponding updates for Ubuntu 20.04 LTS.

Original advisory details:

Ben Kallus discovered that HAProxy incorrectly handled empty Content-Length
headers. A remote attacker could possibly use this issue to manipulate the
payload and bypass certain restrictions.