Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:1329-1

Опубликовано: 03 окт. 2021
Источник: suse-cvrf

Описание

Security update for haproxy

This update for haproxy fixes the following issues:

  • CVE-2021-40346: Fixed request smuggling vulnerability in HTX (bsc#1189877).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Список пакетов

openSUSE Leap 15.2
haproxy-2.0.14-lp152.2.6.1

Ссылки

Описание

An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.

Затронутые продукты
openSUSE Leap 15.2:haproxy-2.0.14-lp152.2.6.1
Ссылки