Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:2975-1

Опубликовано: 07 сент. 2021
Источник: suse-cvrf

Описание

Security update for haproxy

This update for haproxy fixes the following issues:

  • CVE-2021-40346: Fixed request smuggling vulnerability in HTX (bsc#1189877).

Список пакетов

Container ses/7.1/ceph/haproxy:latest
haproxy-2.0.14-11.11.1
SUSE Linux Enterprise High Availability Extension 15 SP2
haproxy-2.0.14-11.11.1
SUSE Linux Enterprise High Availability Extension 15 SP3
haproxy-2.0.14-11.11.1

Ссылки

Описание

An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.

Затронутые продукты
Container ses/7.1/ceph/haproxy:latest:haproxy-2.0.14-11.11.1
SUSE Linux Enterprise High Availability Extension 15 SP2:haproxy-2.0.14-11.11.1
SUSE Linux Enterprise High Availability Extension 15 SP3:haproxy-2.0.14-11.11.1
Ссылки
Уязвимость SUSE-SU-2021:2975-1