Most recent entries from all

bdu:2022-06893

BIT-haproxy-2021-40346

Affected: Bitnami: haproxy

An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.

cnvd-2022-05867

EUVD-2026-31132

fkie_cve-2021-40346

GHSA-jwmg-q4wv-f75h

An integer overflow exists in HAProxy 2.0 through 2.5 in the htx_add_header() can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.

gsd-2021-40346

OESA-2021-1367 — haproxy security update

Affected: openEuler:20.03-LTS-SP1: haproxy, openEuler:20.03-LTS-SP2: haproxy

HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world's most visited ones. Security Fix(es): An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.(CVE-2021-40346)

openSUSE-SU-2021:1329-1 — Security update for haproxy

Security update for haproxy

RHSA-2021:4118 — Red Hat Security Advisory: OpenShift Container Platform 4.9.6 packages and security update

haproxy: does not ensure that the scheme and path portions of a URI have the expected characters haproxy: an HTTP method name may contain a space followed by the name of a protected resource haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled haproxy: request smuggling attack or response splitting via duplicate content-length header

SUSE-SU-2021:2975-1 — Security update for haproxy

Security update for haproxy

UBUNTU-CVE-2021-40346

Affected: Ubuntu:20.04:LTS: haproxy, Ubuntu:22.04:LTS: haproxy

WID-SEC-W-2023-2456 — Red Hat OpenShift: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Dateien zu manipulieren oder Informationen offenzulegen.