Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2023-3180)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

haproxy: data leak via fcgi requests

A flaw was found in HAProxy, which could allow a remote attacker to obtain sensitive information caused by improper initialization when encoding the FCGIBEGINREQUEST record. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain sensitive information and us...

Moderate: Red Hat Security Advisory: haproxy security and bug fix update

An update for haproxy is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: haproxy security and bug fix update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: data leak via fcgi requests CVE-2023-0836 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other relate...

ALSA-2023:6496 Moderate: haproxy security and bug fix update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: data leak via fcgi requests CVE-2023-0836 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other relate...

RHEL 9 : haproxy (RHSA-2023:6496)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6496 advisory. The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: data le...

Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2023-3008)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2023-3031)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, kubernetes-dns-node-cache, wireguard-go, frp, amass, spark-operator, pulumi-kubernetes-operator, vault-k8s-fips, k8sgpt, git-lfs, terraform, pulumi-language-yaml, timoni, cosign, haproxy-ingress, rqlite, prometheus-statsd-exporter,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, kubernetes-dns-node-cache, wireguard-go, frp, amass, spark-operator, pulumi-kubernetes-operator, vault-k8s-fips, k8sgpt, git-lfs, terraform, pulumi-language-yaml, timoni, cosign, haproxy-ingress, rqlite, prometheus-statsd-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, nginx-mainline, nghttp2, wireguard-go, terraform-provider-aws, frp, amass, spark-operator, ip-masq-agent, pulumi-kubernetes-operator, vault-k8s-fips, git-lfs, terraform, pulumi-language-yaml, cosign, haproxy-ingress, rqlite, atlantis, nodetain...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, flux-source-controller, minio, skaffold, stakater-reloader, sigstore-scaffolding, conftest, git-lfs, flux-notification-controller, k3d, mc, wireguard-go, metacontroller, fuse-overlayfs-snapshotter, newrelic-infrastructure-agent,...

CVE-2023-44487

A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RSTSTREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, nginx-mainline, nghttp2, wireguard-go, terraform-provider-aws, frp, amass, spark-operator, ip-masq-agent, pulumi-kubernetes-operator, vault-k8s-fips, git-lfs, terraform, pulumi-language-yaml, cosign, haproxy-ingress, rqlite, atlantis, nodetain...

Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2023-2897)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2023-2878)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: haproxy2

Issue Overview: A flaw was found in haproxy. An input validation flaw when processing HTTP/2 requests causes haproxy to not ensure that the scheme and path portions of a URI have the expected characters. This may cause specially crafted input to bypass implemented security restrictions. The highe...

Medium: haproxy2

Issue Overview: HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind...

Important: haproxy2

Issue Overview: HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and...

Oracle Linux 8 : haproxy (ELSA-2020-1725)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-1725 advisory. - Fix hapack zero byte input causing overwrite CVE-2020-11100, 1819519 Tenable has extracted the preceding description block directly from the Oracle...