The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1936 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    Security Fix(es):

    * haproxy: malformed HTTP/2 requests could lead to out-of-bounds writes (CVE-2020-11100)

    * haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated chunked     value (CVE-2019-18277)

    * haproxy: HTTP/2 implementation was vulnerable to intermediary encapsulation attacks (CVE-2019-19330)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s)     listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The HTTP/2 implementation in HAProxy before 2.0.10     mishandles headers, as demonstrated by carriage return     (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the     zero character (NUL, ASCII 0x0), aka Intermediary     Encapsulation Attacks.(CVE-2019-19330)

  - A flaw was found in HAProxy before 2.0.6. In legacy     mode, messages featuring a transfer-encoding header     missing the 'chunked' value were not being correctly     rejected. The impact was limited but if combined with     the 'http-reuse always' setting, it could be used to     help construct an HTTP request smuggling attack against     a vulnerable component employing a lenient parser that     would ignore the content-length header as soon as it     saw a transfer-encoding one (even if not entirely valid     according to the specification).(CVE-2019-18277)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was found in HAProxy before 2.0.6. In legacy     mode, messages featuring a transfer-encoding header     missing the 'chunked' value were not being correctly     rejected. The impact was limited but if combined with     the 'http-reuse always' setting, it could be used to     help construct an HTTP request smuggling attack against     a vulnerable component employing a lenient parser that     would ignore the content-length header as soon as it     saw a transfer-encoding one (even if not entirely valid     according to the specification).(CVE-2019-18277)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-1725 advisory.

    - Fix hapack zero byte input causing overwrite (CVE-2020-11100, #1819519)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1287 advisory.

  - haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated chunked     value (CVE-2019-18277)

  - haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)

  - haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes (CVE-2020-11100)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the haproxy package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The HTTP/2 implementation in HAProxy before 2.0.10     mishandles headers, as demonstrated by carriage return     (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the     zero character (NUL, ASCII 0x0), aka Intermediary     Encapsulation Attacks.(CVE-2019-19330)

  - A flaw was found in HAProxy before 2.0.6. In legacy     mode, messages featuring a transfer-encoding header     missing the 'chunked' value were not being correctly     rejected. The impact was limited but if combined with     the 'http-reuse always' setting, it could be used to     help construct an HTTP request smuggling attack against     a vulnerable component employing a lenient parser that     would ignore the content-length header as soon as it     saw a transfer-encoding one (even if not entirely valid     according to the specification).(CVE-2019-18277)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:1725 advisory.

  - haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated chunked     value (CVE-2019-18277)

  - haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4174-1 advisory.

    It was discovered that HAproxy incorrectly handled certain HTTP requests. An attacker could possibly use     this issue to a privilege escalation (Request Smuggling).

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for haproxy to version 2.0.10 fixes the following issues :

HAProxy was updated to 2.0.10 &#9; 

Security issues fixed :

  - CVE-2019-18277: Fixed a potential HTTP smuggling in     messages with transfer-encoding header missing the     'chunked' (bsc#1154980).

  - Fixed an improper handling of headers which could have     led to injecting LFs in H2-to-H1 transfers creating new     attack space (bsc#1157712)

  - Fixed an issue where HEADER frames in idle streams are     not rejected and thus trying to decode them HAPrpxy     crashes (bsc#1157714).

Other issue addressed :

  - Macro change in the spec file (bsc#1082318)

More information regarding the release at:
http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d46151555 1b95daae20954b3053ce87e

This update was imported from the SUSE:SLE-15:Update update project.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-267:02 advisory.

    * haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated chunked     value (CVE-2019-18277)
      * haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
136319	RHEL 7 / 8 : OpenShift Container Platform 4.4.3 haproxy (RHSA-2020:1936)	Nessus	Red Hat Local Security Checks	2020/5/5	2024/11/7	critical
139135	EulerOS 2.0 SP8 : haproxy (EulerOS-SA-2020-1805)	Nessus	Huawei Local Security Checks	2020/7/30	2024/2/27	critical
149110	EulerOS 2.0 SP3 : haproxy (EulerOS-SA-2021-1797)	Nessus	Huawei Local Security Checks	2021/4/30	2024/1/3	high
180906	Oracle Linux 8 : haproxy (ELSA-2020-1725)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/22	critical
312521	RHCOS 3 : OpenShift Container Platform 3.11 (RHSA-2020:1287)	Nessus	Red Hat Local Security Checks	2026/5/6	2026/5/6	critical
140007	EulerOS Virtualization for ARM 64 3.0.6.0 : haproxy (EulerOS-SA-2020-1904)	Nessus	Huawei Local Security Checks	2020/8/28	2024/2/22	critical
145810	CentOS 8 : haproxy (CESA-2020:1725)	Nessus	CentOS Local Security Checks	2021/2/1	2024/1/25	critical
130587	Ubuntu 16.04 LTS / 18.04 LTS : HAproxy vulnerability (USN-4174-1)	Nessus	Ubuntu Local Security Checks	2019/11/6	2024/8/28	high
131688	openSUSE Security Update : haproxy (openSUSE-2019-2626)	Nessus	SuSE Local Security Checks	2019/12/4	2024/4/5	high
293941	MiracleLinux 8 : haproxy-1.8.23-3.el8 (AXSA:2020-267:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical

检测

插件搜索

critical

critical

high

critical

critical

critical

critical

high

high

critical