Lucene search
K

8 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.25 views

Unity Linux 20.1060e / 20.1070e Security Update: haproxy (UTSA-2026-017416)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017416 advisory. An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situation with an attacker-controlled HTTP Host heade...

7.5CVSS7.1AI score0.02322EPSS
Exploits0References4
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux – Vulnerability in HAPProxy

A issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. This issue can lead to a situation where the HTTP Host header is controlled by an attacker, due to a mismatch between the Host field and its corresponding authority value being mishandled...

7.5CVSS7.2AI score0.02322EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:38 a.m.1 views

SUSE CVE-2021-39242

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situation with an attacker-controlled HTTP Host header, because a mismatch between Host and authority is mishandled...

7.5CVSS6.9AI score0.02322EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2022/01/05 3:47 p.m.43 views

haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled

haproxy was found to be vulnerable to HTTP host header attack: This problem creates a scenario in which it's possible to drop the Host header and use the authority only after forwarding to a second http2 layer, possibly causing two differing values of Host at a different stage. The highest threat...

7.5CVSS5.7AI score0.02322EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/11/10 8:49 p.m.6 views

haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled

haproxy was found to be vulnerable to HTTP host header attack: This problem creates a scenario in which it's possible to drop the Host header and use the authority only after forwarding to a second http2 layer, possibly causing two differing values of Host at a different stage. The highest threat...

7.5CVSS5.7AI score0.02322EPSS
Exploits0References4
OSV
OSV
added 2021/08/17 7:15 p.m.1 views

DEBIAN-CVE-2021-39242

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situation with an attacker-controlled HTTP Host header, because a mismatch between Host and authority is mishandled...

7.5CVSS7.3AI score0.02322EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/08/17 12:0 a.m.3 views

Haproxy HAProxy 安全漏洞

Haproxy HAProxy is an open source TCP/HTTP load balancing server from the French company HAProxy Haproxy. The server provides Layer 4 and Layer 7 proxies and can support tens of thousands of connection levels with high efficiency and stability. A security vulnerability exists in HAProxy, which...

7.5CVSS7.2AI score0.02322EPSS
Exploits0References14
Positive Technologies
Positive Technologies
added 2021/08/11 12:0 a.m.4 views

PT-2021-7493 · Haproxy +2 · Haproxy +2

Name of the Vulnerable Software and Affected Versions: HAProxy versions 2.2 before 2.2.16 HAProxy versions 2.3 before 2.3.13 HAProxy versions 2.4 before 2.4.3 Description: The issue is related to a mismatch between Host and authority being mishandled, which can lead to an attacker-controlled HTTP...

7.8CVSS6.5AI score0.56083EPSS
Exploits5References42
Rows per page
Query Builder