Lucene search

UbuntuUSN-6294-1

HistoryAug 16, 2023 - 12:00 a.m.

HAProxy vulnerability

2023-08-1600:00:00

ubuntu.com

ubuntu

haproxy

vulnerability

payload manipulation

content-length headers

bypass restrictions

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

JSON

Releases

Ubuntu 23.04
Ubuntu 22.04 LTS

Packages

haproxy - fast and reliable load balancing reverse proxy

Details

Ben Kallus discovered that HAProxy incorrectly handled empty Content-Length
headers. A remote attacker could possibly use this issue to manipulate the
payload and bypass certain restrictions.

OSVersionArchitecturePackageVersionFilename
Ubuntu23.04noarchhaproxy< 2.6.9-1ubuntu1.1UNKNOWN
Ubuntu23.04noarchhaproxy-dbgsym< 2.6.9-1ubuntu1.1UNKNOWN
Ubuntu23.04noarchhaproxy-doc< 2.6.9-1ubuntu1.1UNKNOWN
Ubuntu23.04noarchvim-haproxy< 2.6.9-1ubuntu1.1UNKNOWN
Ubuntu22.04noarchhaproxy< 2.4.22-0ubuntu0.22.04.2UNKNOWN
Ubuntu22.04noarchhaproxy-dbgsym< 2.4.22-0ubuntu0.22.04.2UNKNOWN
Ubuntu22.04noarchhaproxy-doc< 2.4.22-0ubuntu0.22.04.2UNKNOWN
Ubuntu22.04noarchvim-haproxy< 2.4.22-0ubuntu0.22.04.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	23.04	noarch	haproxy	< 2.6.9-1ubuntu1.1	UNKNOWN
Ubuntu	23.04	noarch	haproxy-dbgsym	< 2.6.9-1ubuntu1.1	UNKNOWN
Ubuntu	23.04	noarch	haproxy-doc	< 2.6.9-1ubuntu1.1	UNKNOWN
Ubuntu	23.04	noarch	vim-haproxy	< 2.6.9-1ubuntu1.1	UNKNOWN
Ubuntu	22.04	noarch	haproxy	< 2.4.22-0ubuntu0.22.04.2	UNKNOWN
Ubuntu	22.04	noarch	haproxy-dbgsym	< 2.4.22-0ubuntu0.22.04.2	UNKNOWN
Ubuntu	22.04	noarch	haproxy-doc	< 2.4.22-0ubuntu0.22.04.2	UNKNOWN
Ubuntu	22.04	noarch	vim-haproxy	< 2.4.22-0ubuntu0.22.04.2	UNKNOWN

References

ubuntu.com/security/CVE-2023-40225