p PatchFirst

CVE-2023-0056

CVE-2023-0056

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.

CVSS 6.5 · Medium · EPSS 1.8% · Fix available

Published
Updated

Stack: system · web

Affected products and versions

  • haproxy

    Versions
    • unknown: Affected

    No fix published

  • haproxy Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.6.8-1

    Update to 2.6.8-1

  • haproxy Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.6.8-1

    Update to 2.6.8-1

  • haproxy Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.6.8-1

    Update to 2.6.8-1

  • haproxy Ubuntu:20.04:LTS

    Versions
    • 2.0.5-1
    • 2.0.8-1
    • 2.0.9-1
    • 2.0.10-1
    • 2.0.10-1ubuntu1
    • 2.0.11-1ubuntu1
    • 2.0.12-1ubuntu2
    • 2.0.13-1ubuntu2
    • 2.0.13-2
    • 2.0.13-2ubuntu0.1
    • 2.0.13-2ubuntu0.2
    • 2.0.13-2ubuntu0.3
    • 2.0.13-2ubuntu0.5
    • 2.0.29-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 2.0.29-0ubuntu1.1

    Update to 2.0.29-0ubuntu1.1

  • haproxy Ubuntu:22.04:LTS

    Versions
    • 2.2.9-2ubuntu2
    • 2.4.8-1
    • 2.4.8-2ubuntu3
    • 2.4.11-1ubuntu1
    • 2.4.12-1ubuntu1
    • 2.4.12-1ubuntu2
    • 2.4.13-1ubuntu1
    • 2.4.14-1ubuntu1
    • 2.4.18-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 2.4.18-0ubuntu1.1

    Update to 2.4.18-0ubuntu1.1

Original sources

Check your server →