2654 matches found
HAProxy Input Validation
The vulnerability of the HTTP server software of HAProxy is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity from a remote location...
RHEL 7 : rh-haproxy18-haproxy (RHSA-2020:1290)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1290 advisory. HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Security Fixes: haproxy: malformed HTTP/2 reques...
RHEL 7 : rh-haproxy18-haproxy (RHSA-2020:2265)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2265 advisory. HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. The following packages have been upgrad...
CVE-2023-0056
An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability...
UBUNTU-CVE-2023-0056
An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability...
CVE-2023-0056
An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability...
VulnCheck KEV: CVE-2022-31137
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 6.1.1.0 are subject to a remote code execution vulnerability. System commands can be run remotely via the subprocessexecute function without processing the inputs received from the user in the...
CVE-2022-41881
A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...
Denial Of Service (DoS)
netty-codec-haproxy is vulnerable to Denial Of Service DoS. The vulnerability is due to a StackOverflowError in the HAProxyMessage.java as it does not properly limit the maximum nesting of TLV, allowing an attacker to cause an application crash via infinite recursion by passing a maliciously...
ai.djl.python:python (0.14.0), au.csiro.pathling:encoders (>=5.1.0, <=5.1.1) +4590 more potentially affected by CVE-2022-41881 via io.netty:netty-codec-haproxy (>=4.1.21.final, <=4.1.85.final)
io.netty:netty-codec-haproxy MAVEN version =4.1.21.final, =5.1.0, =1.0.0, =0.0.2-alpha, =0.0.3-alpha, =0.0.10-alpha, =0.0.4-alpha, =0.3.28, =1.2.1, =1.2.1, =1.2.1, =1.0.1, =1.1.1, =1.1.3 and more Source cves: CVE-2022-41881 Source advisory: GHSA-FX2C-96VJ-985V...
ai.djl.python:python (0.14.0), au.csiro.pathling:encoders (>=5.1.0, <=5.1.1) +4590 more potentially affected by CVE-2022-41881 via io.netty:netty-codec-haproxy (>=4.1.21.final, <=4.1.85.final)
io.netty:netty-codec-haproxy MAVEN version =4.1.21.final, =5.1.0, =1.0.0, =0.0.2-alpha, =0.0.3-alpha, =0.0.10-alpha, =0.0.4-alpha, =0.3.28, =1.2.1, =1.2.1, =1.2.1, =1.0.1, =1.1.1, =1.1.3 and more Source cves: CVE-2022-41881 Source advisory: OSV:GHSA-FX2C-96VJ-985V...
ai.djl.python:python (0.14.0), au.csiro.pathling:encoders (>=5.1.0, <=5.1.1) +4590 more potentially affected by CVE-2022-41881 via io.netty:netty-codec-haproxy (>=4.1.21.final, <=4.1.85.final)
io.netty:netty-codec-haproxy MAVEN version =4.1.21.final, =5.1.0, =1.0.0, =0.0.2-alpha, =0.0.3-alpha, =0.0.10-alpha, =0.0.4-alpha, =0.3.28, =1.2.1, =1.2.1, =1.2.1, =1.0.1, =1.1.1, =1.1.3 and more Source cves: CVE-2022-41881 Source advisory: MEND:CVE-2022-41881...
HAProxy Data Compromise
The vulnerability of the server software HAProxy is related to deficiencies in handling exceptional states. Exploiting this vulnerability allows a remote attacker to compromise data integrity...
HAProxy DoS
The vulnerability of the server software HAProxy lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause service failures...
HAProxy Confidential Data Access
The vulnerability of the server software HAProxy is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...
HAProxy htx_add_header Component Data Compromise
The vulnerability of the htxaddheader function in the include/haproxy/htx.h component of HAProxy server software is related to integer overflow. Exploiting this vulnerability allows a remote attacker to compromise data integrity...
haproxy bug fix and enhancement update
An update is available for haproxy. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.1...
haproxy bug fix and enhancement update
An update is available for haproxy. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...
Moderate Photon OS Security Update - PHSA-2022-4.0-0263
Updates of 'haproxy', 'dbus' packages of Photon OS have been released...
haproxy:fuzz_cfg_parser: Heap-buffer-overflow in parse_line
Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=4952538231472128 Project: haproxy Fuzzing Engine: afl Fuzz Target: fuzzcfgparser Job Type: aflasanhaproxy Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x619000000b14 Cra...