2162 matches found
CVE-2019-14243
CVE-2019-14243 affects the mastercactapus proxyprotocol plugin for Caddy (headerv2.go in the proxyprotocol code path) prior to version 0.0.2. The flaw allows remote attackers to trigger a denial of service (webserver panic and daemon crash) by sending a crafted HAProxy PROXY v2 request with trunc...
CVE-2019-14241
HAProxy through 2.0.2 allows attackers to cause a denial of service hapanic via vectors related to htxmanageclientsidecookies in protohtx.c...
CVE-2019-14241
HAProxy through 2.0.2 allows attackers to cause a denial of service hapanic via vectors related to htxmanageclientsidecookies in protohtx.c...
CVE-2019-14241
HAProxy through 2.0.2 allows attackers to cause a denial of service hapanic via vectors related to htxmanageclientsidecookies in protohtx.c...
Design/Logic Flaw
HAProxy through 2.0.2 allows attackers to cause a denial of service hapanic via vectors related to htxmanageclientsidecookies in protohtx.c...
CVE-2019-14241
HAProxy has a CVE-2019-14241 cookie memory corruption vulnerability described as a DoS via htx_manage_client_side_cookies in proto_htx.c. OpenSUSE advisories and IBM/Aspera pages indicate fixes in haproxy 2.0.5+git0.d905f49a and later; remediation is to upgrade to that version (e.g., haproxy 2.0....
CVE-2019-14241
HAProxy through 2.0.2 allows attackers to cause a denial of service hapanic via vectors related to htxmanageclientsidecookies in protohtx.c...
CVE-2019-14241
HAProxy through 2.0.2 allows attackers to cause a denial of service hapanic via vectors related to htxmanageclientsidecookies in protohtx.c...
SUSE-SU-2019:1862-1 Security update for ardana and crowbar
This update for ardana and crowbar fixes the following issues: - Restrict rootwrap directories for cinder bsc1132542 - Change Cinder default log level from DEBUG to INFO SCRD-7132 - Remove configuration from migration bsc1126391 - Configurable innodb flush options SCRD-7496 - Secure designate's...
The vulnerability of the `check_request_for_cacheability` function in server software like HAProxy allows attackers to disclose protected information.
The vulnerability of the checkrequestforcacheability function in the HAProxy network software is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through a remote request without authentication...
EulerOS 2.0 SP8 : haproxy (EulerOS-SA-2019-1650)
According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests...
Information Disclosure
haproxy is vulnerable to information disclosure. An unauthenticated attacker is able to obtain confidential information due to improper validation in the function checkrequestforcacheability in protohttp.c...
haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c
Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 if cache enabled allows attackers to achieve information disclosure via an unauthenticated remote request, related to the protohttp.c checkrequestforcacheability function...
haproxy: Out-of-bounds read in dns.c:dns_validate_dns_response() allows for memory disclosure
An out-of-bounds read in dnsvalidatednsresponse in dns.c was discovered in HAProxy through 1.8.14. Due to a missing check when validating DNS responses, remote attackers might be able read the 16 bytes corresponding to an AAAA record from the non-initialized part of the buffer, possibly accessing...
Moderate: Red Hat Security Advisory: rh-haproxy18-haproxy security, bug fix, and enhancement update
An update for rh-haproxy18-haproxy is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
haproxy: Infinite recursion via crafted packet allows stack exhaustion and denial of service
An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...
Photon OS 1.0: Haproxy PHSA-2019-1.0-0220
An update of the haproxy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0220. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 2.0: Haproxy PHSA-2019-2.0-0150
An update of the haproxy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0150. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 1.0: Haproxy PHSA-2019-1.0-0226
An update of the haproxy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0226. The text itself is copyright C VMware, Inc. include"compat.inc"; if description...
