Insecure URL Path

HAProxy has insecure path. The vulnerability exists due to the system not ensuring that the scheme and path portions of a URI have the expected characters...

openSUSE 15 Security Update : haproxy (openSUSE-SU-2021:1167-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1167-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...

openSUSE: Security Advisory for haproxy (openSUSE-SU-2021:1167-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:1167-1 Security update for haproxy

This update for haproxy fixes the following issues: - Fixes HAProxy vulnerabilities on H2 bsc1189366. This update was imported from the SUSE:SLE-15-SP1:Update update project...

PT-2021-27358

Name of the Vulnerable Software and Affected Versions: haproxy affected versions not specified Description: The issue concerns HAProxy vulnerabilities on H2. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...

openSUSE 15 Security Update : haproxy (openSUSE-SU-2021:2773-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:2773-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...

SUSE SLES15 Security Update : haproxy (SUSE-SU-2021:2773-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2021:2773-1 advisory. - Fixes HAProxy vulnerabilities on H2 bsc1189366. Tenable has extracted the preceding description block directly from the SUSE security advisory. Note...

openSUSE: Security Advisory for haproxy (openSUSE-SU-2021:2773-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for haproxy (important)

openSUSE Security Update: Security update for haproxy Announcement ID: openSUSE-SU-2021:1167-1 Rating: important References: 1189366 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for haproxy fixes the following issues: ...

OPENSUSE-SU-2021:2773-1 Security update for haproxy

This update for haproxy fixes the following issues: - Fixes HAProxy vulnerabilities on H2 bsc1189366...

SUSE-SU-2021:2773-1 Security update for haproxy

This update for haproxy fixes the following issues: - Fixes HAProxy vulnerabilities on H2 bsc1189366...

CVE-2021-39242

haproxy was found to be vulnerable to HTTP host header attack: This problem creates a scenario in which it's possible to drop the Host header and use the authority only after forwarding to a second http2 layer, possibly causing two differing values of Host at a different stage. The highest threat...

CVE-2021-39240

A flaw was found in haproxy. An input validation flaw when processing HTTP/2 requests causes haproxy to not ensure that the scheme and path portions of a URI have the expected characters. This may cause specially crafted input to bypass implemented security restrictions. The highest threat from...

PT-2021-28448

Name of the Vulnerable Software and Affected Versions: haproxy affected versions not specified Description: The issue concerns HAProxy vulnerabilities on H2. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

SUSE SLES15 Security Update : haproxy (SUSE-SU-2021:2768-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2021:2768-1 advisory. - Fixes HAProxy vulnerabilities on H2 bsc1189366. Tenable has extracted the preceding description block directly from the SUSE security advisory. Note...

SUSE SLES15 Security Update : haproxy (SUSE-SU-2021:2769-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2021:2769-1 advisory. - Fixes HAProxy vulnerabilities on H2 bsc1189366. Tenable has extracted the preceding description block directly from the SUSE security advisory. Note...

PT-2021-27369

Name of the Vulnerable Software and Affected Versions: haproxy affected versions not specified Description: The issue concerns HAProxy vulnerabilities on H2. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Ubuntu: Security Advisory (USN-5042-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4960-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4960-1 : haproxy - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4960 advisory. - An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that the scheme and path portions of a URI hav...