Advisory ROSA-SA-2021-1851

🗓️ 02 Jul 2021 17:04:24Reported by ROSA LABType

HAProxy 1.5.18 on Cobalt 7.9 has multiple critical vulnerabilities related to buffer overflow, denial of service, DNS validation, and HTTP/2 header mishandling

Reporter	Title	Published	Views	Family All 299
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	9 Jan 202420:27	–	ibm
IBM Security Bulletins	Security Bulletin: HAProxy vulnerability CVE-2019-19330 impacts IBM Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint versions prior to V4.0	10 Dec 202023:19	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM® Cloud Private Cloud Foundry (CVE-2018-14645)	19 Nov 201815:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in HAProxy affects IBM Watson Studio Local	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in HAProxy shipped with Data Science Experience Local	18 Sep 201819:15	–	ibm
IBM Security Bulletins	Security Bulletin: HAProxy vulnerability CVE-2019-14241 impacts IBM Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint versions prior to V4.0	10 Dec 202022:09	–	ibm
IBM Security Bulletins	Security Bulletin: HAProxy vulnerability CVE-2019-18277 impacts IBM Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint versions prior to V4.0	10 Dec 202022:14	–	ibm
Tenable Nessus	Amazon Linux 2 : haproxy2 (ALASHAPROXY2-2023-002)	27 Sep 202300:00	–	nessus
Tenable Nessus	CentOS 8 : haproxy (CESA-2020:1725)	1 Feb 202100:00	–	nessus
Tenable Nessus	Debian DLA-3034-1 : haproxy - LTS security update	31 May 202200:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Cobalt	any	noarch	haproxy	1.5.18	UNKNOWN

02 Jul 2021 17:04Current

8.1High risk

Vulners AI Score8.1

CVSS 27.5

CVSS 37.5

CVSS 3.19.8

EPSS0.7024