2160 matches found
EulerOS 2.0 SP9 : haproxy (EulerOS-SA-2022-1866)
According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way HAProxy processed HTTP responses containing the 'Set-Cookie2' header. This flaw could allow an attacker to send...
Security Bulletin: Vulnerability in HAProxy affecting Watson Knowledge Catalog for IBM Cloud Pak for Data
Summary HAProxy is vulnerable to a denial of service that is impacting Watson Knowledge Catalog for IBM Cloud Pak for Data. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2022-0711 DESCRIPTION: HAProxy is vulnerable to a denial of service, caused by a flaw when processing...
Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2022-1806)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2022-1789)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP10 : haproxy (EulerOS-SA-2022-1789)
According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way HAProxy processed HTTP responses containing the 'Set-Cookie2' header. This flaw could allow an attacker to send...
EulerOS 2.0 SP10 : haproxy (EulerOS-SA-2022-1806)
According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way HAProxy processed HTTP responses containing the 'Set-Cookie2' header. This flaw could allow an attacker to send...
Debian: Security Advisory (DLA-3034-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-3034-1 : haproxy - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3034 advisory. - An out-of-bounds read in dnsvalidatednsresponse in dns.c was discovered in HAProxy through 1.8.14. Due to a missing check when validating DNS responses, remote...
[SECURITY] [DLA 3034-1] haproxy security update
Debian LTS Advisory DLA-3034-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 30, 2022 https://wiki.debian.org/LTS Package : haproxy Version : 1.7.5-2+deb9u1 CVE ID : CVE-2018-20102 CVE-2018-20103 CVE-2019-18277 Debian Bug : 916308 916307 Nathan Davison...
DLA-3034-1 haproxy - security update
Bulletin has no description...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.8.41 bug fix and security update
Red Hat OpenShift Container Platform release 4.8.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8. Red Hat Product Security has rated this update as having a...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.7.51 security update
Red Hat OpenShift Container Platform release 4.7.51 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.9.35 bug fix and security update
Red Hat OpenShift Container Platform release 4.9.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9. Red Hat Product Security has rated this update as having a...
mastercactapus proxyprotocol vulnerable to denial of service
headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, allows remote attackers to cause a denial of service webserver panic and daemon crash via a crafted HAProxy PROXY v2 request with truncated source/destinatio...
GHSA-85C5-CCM8-VR96 mastercactapus proxyprotocol vulnerable to denial of service
headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, allows remote attackers to cause a denial of service webserver panic and daemon crash via a crafted HAProxy PROXY v2 request with truncated source/destinatio...
new packages: haproxy
An update is available for haproxy. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...
CVE-2020-7238
A flaw was found in Netty, where it mishandles Transfer-Encoding whitespace. This flaw allows HTTP Request Smuggling. Mitigation Use HTTP/2 instead clear boundaries between requests Disable reuse of backend connections eg. http-reuse never in HAProxy or whatever equivalent LB settings...
CVE-2019-20445
A flaw was found in Netty before version 4.1.44, where it accepted multiple Content-Length headers and also accepted both Transfer-Encoding, as well as Content-Length headers where it should reject the message under such circumstances. In circumstances where Netty is used in the context of a...
CVE-2022-1677
In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster router's HAProxy configuration files. This malformed entry can match any arbitrary hostname, or all hostnames in the cluster, and direct...
