CVE-2018-10184

An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the maxframesize setting instead of being checked against the bufsize. The maxframesize only applies to outgoing traffic and not to incoming, so if a large enough frame size is advertised in the...

CVE-2018-10184

HAProxy before 1.8.8 is affected by CVE-2018-10184. The vulnerability arises from validating incoming HTTP/2 frame length against max_frame_size (outgoing scope) rather than against bufsize; if a large frame is advertised, a wrapped frame can be defragmented into a temporary buffer, potentially a...

CVE-2018-10184

An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the maxframesize setting instead of being checked against the bufsize. The maxframesize only applies to outgoing traffic and not to incoming, so if a large enough frame size is advertised in the...

[SECURITY] Fedora 28 Update: haproxy-1.8.8-1.fc28

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...

HAProxy Network Authentication Vulnerability

HAProxy is an open source TCP/HTTP load balancing server from the French company HAProxy. The server provides 4-layer , 7-layer proxy , and can support tens of thousands of level of connections , with high efficiency , stability and other characteristics . HAProxy suffers from a network...

CVE-2016-2102

HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network...

Design/Logic Flaw

HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network...

CVE-2016-2102

HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network...

CVE-2016-2102

HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network...

CVE-2016-2102

HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network...

CVE-2016-2102

Removed by vendor...

CVE-2016-2102

HAProxy in openstack-tripleo-image-elements is exposed via non-authenticated statistics over the network (CVE-2016-2102). Connected sources reference haproxy-related vulnerabilities affecting the package, and a Red Hat bug entry (1311145) is linked. The provided connected documents do not include...

Poodle SSLv3 Vulnerability

github.com/jaytaylor/shipbuilder is vulnerable to the poodle SSLv3 vulnerability. It does not disable the use of SSL 3.0 by using proper setting in haproxy configuration...

Information Disclosure

github.com/openshift/origin is vulnerable to information disclosure. The HAproxy allows puts the internal IP address of a pod into the OPENSHIFTnamespaceSERVERID cookie, allowing local users to obtain this information...

CVE-2015-3281 HAProxy vulnerabilities | Cloud Foundry

Severity Medium Vendor HAProxy Versions Affected HAProxy 1.5.x Description It was discovered that HAProxy incorrectly handled certain buffers. A remote attacker could possibly use this issue to obtain sensitive information belonging to previous requests. Affected Products and Versions Severity is...

HAProxy 1.7.x < 1.7.3 DoS

Binary data 700018.prm...

HAProxy 1.5.x < 1.5.12 DoS

Binary data 9978.prm...

HAProxy 1.6.x < 1.6.4 Multiple Vulnerabilities

Binary data 9965.prm...

HAProxy 1.5.x < 1.5.16 Off-by-one Vulnerability

Binary data 9964.prm...

See how I found the Github Enterprise version of the application SQL injection vulnerabilities and get 5000 dollars Bounty-vulnerability warning-the black bar safety net

GitHub Enterprise Edition software is designed for company groups to deploy in the internal network for the development of services of commercial application. Github enterprise uses the standard OVF format integrated to a virtual machine（VM）mirror, can be in the enterprise. github. com website...