Lucene search
K

1988 matches found

Mageia
Mageia
added 2025/04/25 5:34 p.m.21 views

Updated haproxy packages fix security vulnerability

BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refsAleandro Prudenzano of Doyensec and Edoardo Geraci of Codean Labs reported a bug in sampleconvregsub, which can cause replacements of multiple back-references to overflow the temporary trash buffer. The problem happen...

6.8CVSS7.6AI score0.02113EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2025/04/24 12:0 a.m.3 views

Debian: Security Advisory (DLA-4135-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.9AI score0.02113EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/04/24 12:0 a.m.7 views

Ubuntu: Security Advisory (USN-7431-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.9AI score0.02113EPSS
Exploits0References2
Debian
Debian
added 2025/04/23 8:28 p.m.7 views

[SECURITY] [DLA 4135-1] haproxy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4135-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 23, 2025 https://wiki.debian.org/LTS -...

6.8CVSS6.9AI score0.02113EPSS
Exploits0
Ubuntu
Ubuntu
added 2025/04/23 11:45 a.m.14 views

USN-7431-2: HAProxy vulnerability

USN-7431-1 fixed a vulnerability in HAProxy. This update provides the corresponding update for Ubuntu 25.04. Original advisory details: Aleandro Prudenzano and Edoardo Geraci discovered that HAProxy incorrectly handled certain uncommon configurations that replace multiple short patterns with a...

6.8CVSS6.5AI score0.02113EPSS
Exploits0
OSV
OSV
added 2025/04/23 11:45 a.m.0 views

USN-7431-2 haproxy vulnerability

USN-7431-1 fixed a vulnerability in HAProxy. This update provides the corresponding update for Ubuntu 25.04. Original advisory details: Aleandro Prudenzano and Edoardo Geraci discovered that HAProxy incorrectly handled certain uncommon configurations that replace multiple short patterns with a...

6.8CVSS6.3AI score0.02113EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/04/23 12:0 a.m.10 views

Debian dla-4135 : haproxy - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4135 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4135-1 [email protected] https://www.debian.org/lts/security/...

6.8CVSS6.3AI score0.02113EPSS
Exploits0References4
OSV
OSV
added 2025/04/23 12:0 a.m.10 views

DLA-4135-1 haproxy - security update

Bulletin has no description...

6.8CVSS6.7AI score0.02113EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.2 views

The vulnerability of server software like HAProxy, related to deficiencies in HTTP request processing, allows attackers to circumvent security restrictions and send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of server-side software like HAProxy is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and send hidden HTTP requests a type of HTTP Request Smuggling attack...

5.3CVSS0.00395EPSS
Exploits0References9Affected Software2
CBLMariner
CBLMariner
added 2025/04/22 3:8 p.m.9 views

CVE-2025-32464 affecting package haproxy for versions less than 2.9.11-3

CVE-2025-32464 affecting package haproxy for versions less than 2.9.11-3. A patched version of the package is available...

6.8CVSS7.3AI score0.02113EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/04/22 7:0 a.m.1 views

HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.

...

6.8CVSS5.8AI score0.02113EPSS
Exploits0
Wolfi
Wolfi
added 2025/04/21 7:44 p.m.36 views

CVE-2025-32464 vulnerabilities

Vulnerabilities for packages: haproxy...

6.8CVSS7.1AI score0.02113EPSS
Exploits0
Wolfi
Wolfi
added 2025/04/21 7:44 p.m.19 views

GHSA-FRG5-H47X-75J9 vulnerabilities

Vulnerabilities for packages: haproxy...

7.5AI score
Exploits0
Chainguard
Chainguard
added 2025/04/21 7:14 p.m.20 views

GHSA-FRG5-H47X-75J9 vulnerabilities

Vulnerabilities for packages: haproxy...

7.5AI score
Exploits0
Chainguard
Chainguard
added 2025/04/21 7:13 p.m.20 views

CVE-2025-32464 vulnerabilities

Vulnerabilities for packages: haproxy...

6.8CVSS7.1AI score0.02113EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/04/18 12:0 a.m.7 views

SUSE SLES15 Security Update : haproxy (SUSE-SU-2025:1338-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:1338-1 advisory. - CVE-2025-32464: Fixed heap-based buffer overflow in sampleconvregsub. bsc1240971 Tenable has extracted the preceding description block directly from...

6.8CVSS6.4AI score0.02113EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2025/04/17 11:2 a.m.1 views

Security update for haproxy

This update for haproxy fixes the following issues: CVE-2025-32464: Fixed heap-based buffer overflow in sampleconvregsub. bsc1240971 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run th...

6.8CVSS6.2AI score0.02113EPSS
Exploits0References4
OSV
OSV
added 2025/04/17 11:2 a.m.8 views

SUSE-SU-2025:1338-1 Security update for haproxy

This update for haproxy fixes the following issues: - CVE-2025-32464: Fixed heap-based buffer overflow in sampleconvregsub. bsc1240971...

6.8CVSS7.7AI score0.02113EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2025/04/16 12:0 a.m.11 views

openSUSE Security Advisory (SUSE-SU-2025:1264-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS5.5AI score0.02113EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/04/16 12:0 a.m.9 views

SUSE SLES15 / openSUSE 15 Security Update : haproxy (SUSE-SU-2025:1264-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1264-1 advisory. - CVE-2025-32464: Fixed heap-based buffer overflow in sampleconvregsub. bsc1240971 Tenable has extracted the preceding description block...

6.8CVSS6.4AI score0.02113EPSS
Exploits0References4
Rows per page
Query Builder