Unrated severityNVD Advisory· Published Aug 17, 2021· Updated Aug 4, 2024

CVE-2021-39242

Description

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situation with an attacker-controlled HTTP Host header, because a mismatch between Host and authority is mishandled.

Affected products

HAProxy/HAProxydescription
osv-coords
pkg:bitnami/haproxy
Range: >= 2.2.0, < 2.2.16

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ALECUZDIMT5FYGP6V6PVSI4BKVZTZWN/mitrevendor-advisoryx_refsource_FEDORA
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RPNY4WZIQUAUOCLIMUPC37AQWNXTWIQM/mitrevendor-advisoryx_refsource_FEDORA
www.debian.org/security/2021/dsa-4960mitrevendor-advisoryx_refsource_DEBIAN
git.haproxy.orgmitrex_refsource_MISC
www.mail-archive.com/haproxy%40formilux.org/msg41041.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000