Unrated severityNVD Advisory· Published Mar 23, 2023· Updated Feb 25, 2025

CVE-2023-0056

Description

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.

Affected products

osv-coords69 versions
pkg:apk/chainguard/haproxy pkg:apk/chainguard/haproxy-2.2 pkg:apk/chainguard/haproxy-2.2-doc pkg:apk/chainguard/haproxy-2.2-iamguarded-compat pkg:apk/chainguard/haproxy-2.2-oci-entrypoint pkg:apk/chainguard/haproxy-2.4 pkg:apk/chainguard/haproxy-2.4-doc pkg:apk/chainguard/haproxy-2.4-iamguarded-compat pkg:apk/chainguard/haproxy-2.4-nocaps pkg:apk/chainguard/haproxy-2.4-oci-entrypoint pkg:apk/chainguard/haproxy-2.6 pkg:apk/chainguard/haproxy-2.6-doc pkg:apk/chainguard/haproxy-2.6-iamguarded-compat pkg:apk/chainguard/haproxy-2.6-nocaps pkg:apk/chainguard/haproxy-2.6-oci-entrypoint pkg:apk/chainguard/haproxy-2.8 pkg:apk/chainguard/haproxy-2.8-doc pkg:apk/chainguard/haproxy-2.8-iamguarded-compat pkg:apk/chainguard/haproxy-2.8-nocaps pkg:apk/chainguard/haproxy-2.8-oci-entrypoint pkg:apk/chainguard/haproxy-2.9 pkg:apk/chainguard/haproxy-2.9-doc pkg:apk/chainguard/haproxy-2.9-iamguarded-compat pkg:apk/chainguard/haproxy-2.9-oci-entrypoint pkg:apk/chainguard/haproxy-3.0 pkg:apk/chainguard/haproxy-3.0-doc pkg:apk/chainguard/haproxy-3.0-iamguarded-compat pkg:apk/chainguard/haproxy-3.0-nocaps pkg:apk/chainguard/haproxy-3.0-oci-entrypoint pkg:apk/chainguard/haproxy-3.1 pkg:apk/chainguard/haproxy-3.1-doc pkg:apk/chainguard/haproxy-3.1-iamguarded-compat pkg:apk/chainguard/haproxy-3.1-nocaps pkg:apk/chainguard/haproxy-3.1-oci-entrypoint pkg:apk/chainguard/haproxy-3.2 pkg:apk/chainguard/haproxy-3.2-doc pkg:apk/chainguard/haproxy-3.2-iamguarded-compat pkg:apk/chainguard/haproxy-3.2-nocaps pkg:apk/chainguard/haproxy-3.2-oci-entrypoint pkg:apk/chainguard/haproxy-3.3 pkg:apk/chainguard/haproxy-doc pkg:apk/chainguard/haproxy-oci-entrypoint pkg:apk/wolfi/haproxy pkg:apk/wolfi/haproxy-2.9 pkg:apk/wolfi/haproxy-2.9-doc pkg:apk/wolfi/haproxy-2.9-oci-entrypoint pkg:apk/wolfi/haproxy-3.0 pkg:apk/wolfi/haproxy-3.0-doc pkg:apk/wolfi/haproxy-3.0-oci-entrypoint pkg:apk/wolfi/haproxy-3.1 pkg:apk/wolfi/haproxy-3.1-doc pkg:apk/wolfi/haproxy-3.1-oci-entrypoint pkg:apk/wolfi/haproxy-3.2 pkg:apk/wolfi/haproxy-3.2-doc pkg:apk/wolfi/haproxy-3.2-iamguarded-compat pkg:apk/wolfi/haproxy-3.2-nocaps pkg:apk/wolfi/haproxy-3.2-oci-entrypoint pkg:apk/wolfi/haproxy-3.3 pkg:apk/wolfi/haproxy-doc pkg:apk/wolfi/haproxy-oci-entrypoint pkg:bitnami/haproxy pkg:rpm/almalinux/haproxy pkg:rpm/opensuse/haproxy&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/haproxy&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP1 pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP2 pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP3 pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP4 pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Enterprise%20Micro%205.3
< 2.6.8-r0+ 68 more
- (no CPE)range: < 2.6.8-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 3.2.4-r1
- (no CPE)range: < 3.2.4-r1
- (no CPE)range: < 3.2.4-r1
- (no CPE)range: < 3.2.4-r1
- (no CPE)range: < 3.2.4-r1
- (no CPE)range: < 3.3.2-r0
- (no CPE)range: < 2.6.8-r0
- (no CPE)range: < 2.6.8-r0
- (no CPE)range: < 2.6.8-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 3.2.4-r1
- (no CPE)range: < 3.2.4-r1
- (no CPE)range: < 3.2.4-r1
- (no CPE)range: < 3.2.4-r1
- (no CPE)range: < 3.2.4-r1
- (no CPE)range: < 3.3.2-r0
- (no CPE)range: < 2.6.8-r0
- (no CPE)range: < 2.6.8-r0
- (no CPE)
- (no CPE)range: < 2.4.17-3.el9_1.2
- (no CPE)range: < 2.4.8+git0.d1f8d41e0-150400.3.6.1
- (no CPE)range: < 2.4.8+git0.d1f8d41e0-150400.3.6.1
- (no CPE)range: < 2.0.31-150100.8.31.1
- (no CPE)range: < 2.0.31-150200.11.20.1
- (no CPE)range: < 2.0.31-150200.11.20.1
- (no CPE)range: < 2.4.8+git0.d1f8d41e0-150400.3.6.1
- (no CPE)range: < 2.4.8+git0.d1f8d41e0-150400.3.6.1
Haproxy/Haproxyv5
Range: unknown

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

access.redhat.com/security/cve/CVE-2023-0056mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000