rpm package
suse/haproxy&distro=SUSE Linux Enterprise High Availability Extension 15
pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015
Vulnerabilities (9)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-40346 | — | < 2.0.14-3.31.1 | 2.0.14-3.31.1 | Sep 8, 2021 | An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs. | ||
| CVE-2020-11100 | — | < 2.0.10+git0.ac198b92-3.19.1 | 2.0.10+git0.ac198b92-3.19.1 | Apr 2, 2020 | In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution. | ||
| CVE-2019-18277 | — | < 2.0.10+git0.ac198b92-3.15.1 | 2.0.10+git0.ac198b92-3.15.1 | Oct 23, 2019 | A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly rejected. The impact was limited but if combined with the "http-reuse always" setting, it could be used to help construct a | ||
| CVE-2019-14241 | — | < 2.0.5+git0.d905f49a-3.12.6 | 2.0.5+git0.d905f49a-3.12.6 | Jul 23, 2019 | HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c. | ||
| CVE-2018-20615 | — | < 1.8.17~git0.e89d25b2-3.9.1 | 1.8.17~git0.e89d25b2-3.9.1 | Mar 18, 2019 | An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length | ||
| CVE-2018-20103 | — | < 1.8.15~git0.6b6a350a-3.6.2 | 1.8.15~git0.6b6a350a-3.6.2 | Dec 12, 2018 | An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion. | ||
| CVE-2018-20102 | — | < 1.8.15~git0.6b6a350a-3.6.2 | 1.8.15~git0.6b6a350a-3.6.2 | Dec 12, 2018 | An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due to a missing check when validating DNS responses, remote attackers might be able read the 16 bytes corresponding to an AAAA record from the non-initialized part of the buffer | ||
| CVE-2018-14645 | — | < 1.8.14~git0.52e4d43b-3.3.2 | 1.8.14~git0.52e4d43b-3.3.2 | Sep 21, 2018 | A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service. | ||
| CVE-2018-11469 | — | < 1.8.14~git0.52e4d43b-3.3.2 | 1.8.14~git0.52e4d43b-3.3.2 | May 25, 2018 | Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 (if cache enabled) allows attackers to achieve information disclosure via an unauthenticated remote request, related to the proto_http.c check_request_for_cacheability func |
- CVE-2021-40346Sep 8, 2021affected < 2.0.14-3.31.1fixed 2.0.14-3.31.1
An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.
- CVE-2020-11100Apr 2, 2020affected < 2.0.10+git0.ac198b92-3.19.1fixed 2.0.10+git0.ac198b92-3.19.1
In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.
- CVE-2019-18277Oct 23, 2019affected < 2.0.10+git0.ac198b92-3.15.1fixed 2.0.10+git0.ac198b92-3.15.1
A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly rejected. The impact was limited but if combined with the "http-reuse always" setting, it could be used to help construct a
- CVE-2019-14241Jul 23, 2019affected < 2.0.5+git0.d905f49a-3.12.6fixed 2.0.5+git0.d905f49a-3.12.6
HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.
- CVE-2018-20615Mar 18, 2019affected < 1.8.17~git0.e89d25b2-3.9.1fixed 1.8.17~git0.e89d25b2-3.9.1
An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length
- CVE-2018-20103Dec 12, 2018affected < 1.8.15~git0.6b6a350a-3.6.2fixed 1.8.15~git0.6b6a350a-3.6.2
An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion.
- CVE-2018-20102Dec 12, 2018affected < 1.8.15~git0.6b6a350a-3.6.2fixed 1.8.15~git0.6b6a350a-3.6.2
An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due to a missing check when validating DNS responses, remote attackers might be able read the 16 bytes corresponding to an AAAA record from the non-initialized part of the buffer
- CVE-2018-14645Sep 21, 2018affected < 1.8.14~git0.52e4d43b-3.3.2fixed 1.8.14~git0.52e4d43b-3.3.2
A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.
- CVE-2018-11469May 25, 2018affected < 1.8.14~git0.52e4d43b-3.3.2fixed 1.8.14~git0.52e4d43b-3.3.2
Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 (if cache enabled) allows attackers to achieve information disclosure via an unauthenticated remote request, related to the proto_http.c check_request_for_cacheability func