p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de haproxy

Vulnérabilités publiées pour haproxy au cours des 30 derniers jours : 0. Présentes dans le catalogue KEV : 0.

RSS ↗ JSON ↗
Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 9

  1. CVE-2023-25725

    Critique · CVSS 9.1EPSS 5,45%Correctif disponible

    CVE-2023-25725

    HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

    haproxySystèmes d’exploitation Serveurs web
    • Mettez à jour vers 1.8.8-1ubuntu0.13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  2. CVE-2020-11100

    Élevée · CVSS 8.8EPSS 61,59%Correctif disponible

    CVE-2020-11100

    In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.

    haproxySystèmes d’exploitation Serveurs web
    • Mettez à jour vers 1.8.8-1ubuntu0.10
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  4. CVE-2019-18277

    Élevée · CVSS 7.5EPSS 10,07%Correctif disponible

    CVE-2019-18277

    A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly rejected. The impact was limited but if combined with the "http-reuse always" setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).

    haproxySystèmes d’exploitation Serveurs web
    • Mettez à jour vers 1.8.8-1ubuntu0.7
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  5. CVE-2018-20615

    Élevée · CVSS 7.5EPSS 4,46%Correctif disponible

    CVE-2018-20615

    An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame.

    haproxySystèmes d’exploitation Serveurs web
    • Mettez à jour vers 1.8.8-1ubuntu0.3
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  6. CVE-2018-20103

    Élevée · CVSS 7.5EPSS 6,59%Correctif disponible

    CVE-2018-20103

    An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.

    haproxySystèmes d’exploitation Serveurs web
    • Mettez à jour vers 1.8.8-1ubuntu0.3
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  7. CVE-2018-20102

    Élevée · CVSS 7.5EPSS 4,15%Correctif disponible

    CVE-2018-20102

    An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due to a missing check when validating DNS responses, remote attackers might be able read the 16 bytes corresponding to an AAAA record from the non-initialized part of the buffer, possibly accessing anything that was left on the stack, or even past the end of the 8193-byte buffer, depending on the value of accepted_payload_size.

    haproxySystèmes d’exploitation Serveurs web
    • Mettez à jour vers 1.8.8-1ubuntu0.3
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  9. CVE-2018-11469

    Moyenne · CVSS 5.9EPSS 2,92%Correctif disponible

    CVE-2018-11469

    Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 (if cache enabled) allows attackers to achieve information disclosure via an unauthenticated remote request, related to the proto_http.c check_request_for_cacheability function.

    haproxySystèmes d’exploitation Serveurs web
    • Mettez à jour vers 1.8.8-1ubuntu0.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →