Lucene search
UbuntuUSN-6530-2HistoryJul 23, 2024 - 12:00 a.m.
HAProxy vulnerability
2024-07-2300:00:00
ubuntu.com
13
haproxy
ubuntu
vulnerability
remote attacker
sensitive information
path_end rules
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
46.4%
Releases
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- haproxy - fast and reliable load balancing reverse proxy
Details
Seth Manesse and Paul Plasil discovered that HAProxy incorrectly handled
URI components containing the hash character (#). A remote attacker could
possibly use this issue to obtain sensitive information, or to bypass
certain path_end rules.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.04 | noarch | haproxy | < 1.8.8-1ubuntu0.13+esm2 | UNKNOWN |
| Ubuntu | 18.04 | noarch | haproxy | < 1.8.8-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 18.04 | noarch | haproxy-dbgsym | < 1.8.8-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 18.04 | noarch | haproxy-doc | < 1.8.8-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 18.04 | noarch | vim-haproxy | < 1.8.8-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 16.04 | noarch | haproxy | < 1.6.3-1ubuntu0.3+esm1 | UNKNOWN |
| Ubuntu | 16.04 | noarch | haproxy | < 1.6.3-1ubuntu0.3 | UNKNOWN |
| Ubuntu | 16.04 | noarch | haproxy-dbg | < 1.6.3-1ubuntu0.3 | UNKNOWN |
| Ubuntu | 16.04 | noarch | haproxy-dbgsym | < 1.6.3-1ubuntu0.3 | UNKNOWN |
| Ubuntu | 16.04 | noarch | haproxy-doc | < 1.6.3-1ubuntu0.3 | UNKNOWN |
References
Related
nessus
nessus
SUSE SLES15 Security Update : haproxy (SUSE-SU-2023:4645-1)
2023-12-07 00:00:00
EulerOS 2.0 SP8 : haproxy (EulerOS-SA-2024-2034)
2024-07-22 00:00:00
EulerOS 2.0 SP10 : haproxy (EulerOS-SA-2024-1336)
2024-03-12 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2024-1314)
2024-03-13 00:00:00
Ubuntu: Security Advisory (USN-6530-2)
2024-07-24 00:00:00
Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2024-1336)
2024-03-13 00:00:00
alpinelinux
alpinelinux
CVE-2023-45539
2023-11-28 20:15:07
osv
osv
haproxy - security update
2023-12-14 00:00:00
CVE-2023-45539
2023-11-28 20:15:07
haproxy vulnerability
2024-07-23 16:55:58
cloudlinux
cloudlinux
haproxy: Fix of CVE-2023-45539
2023-12-21 18:24:56
nvd
nvd
CVE-2023-45539
2023-11-28 20:15:07
debian
debian
[SECURITY] [DLA 3688-1] haproxy security update
2023-12-14 15:55:00
[SECURITY] [DSA 5590-1] haproxy security update
2023-12-28 12:46:56
cvelist
cvelist
CVE-2023-45539
2023-11-28 00:00:00
ubuntu
ubuntu
HAProxy vulnerability
2023-12-05 00:00:00
redhatcve
redhatcve
CVE-2023-45539
2023-12-05 18:57:01
veracode
veracode
Information Disclosure
2023-11-29 18:31:33
prion
prion
Code injection
2023-11-28 20:15:00
cve
cve
CVE-2023-45539
2023-11-28 20:15:07
cbl_mariner
cbl_mariner
CVE-2023-45539 affecting package haproxy for versions less than 2.4.24-1
2024-09-20 03:31:18
ubuntucve
ubuntucve
CVE-2023-45539
2023-12-04 00:00:00
debiancve
debiancve
CVE-2023-45539
2023-11-28 20:15:07
redos
redos
ROS-20240328-10
2024-03-28 00:00:00
oraclelinux
oraclelinux
haproxy security update
2024-03-06 00:00:00
redhat
redhat
(RHSA-2024:4853) Moderate: OpenShift Container Platform 4.15.24 packages and security update
2024-07-31 00:36:20
(RHSA-2024:1142) Moderate: haproxy security update
2024-03-05 15:32:23
(RHSA-2024:1089) Moderate: haproxy security update
2024-03-05 06:13:18
almalinux
almalinux
Moderate: haproxy security update
2024-03-05 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0167
2023-12-12 00:00:00
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
46.4%
Related for USN-6530-2