This update for haproxy to version 2.0.10 fixes the following issues :

HAProxy was updated to 2.0.10 &#9; 

Security issues fixed :

  - CVE-2019-18277: Fixed a potential HTTP smuggling in     messages with transfer-encoding header missing the     'chunked' (bsc#1154980).

  - Fixed an improper handling of headers which could have     led to injecting LFs in H2-to-H1 transfers creating new     attack space (bsc#1157712)

  - Fixed an issue where HEADER frames in idle streams are     not rejected and thus trying to decode them HAPrpxy     crashes (bsc#1157714).

Other issue addressed :

  - Macro change in the spec file (bsc#1082318)

More information regarding the release at:
http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d46151555 1b95daae20954b3053ce87e

This update was imported from the SUSE:SLE-15:Update update project.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4174-1 advisory.

    It was discovered that HAproxy incorrectly handled certain HTTP requests. An attacker could possibly use     this issue to a privilege escalation (Request Smuggling).

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the haproxy package has been released.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2265 advisory.

    HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments.

    The following packages have been upgraded to a later upstream version: rh-haproxy18-haproxy (1.8.24).
    (BZ#1774747)

    Security Fix(es):

    * haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated chunked     value (CVE-2019-18277)

    * haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Software Collections 3.5 Release     Notes linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1287 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    Security Fix(es):

    * haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes (CVE-2020-11100)

    * haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated chunked     value (CVE-2019-18277)

    * haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s)     listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for haproxy to version 2.0.10 fixes the following issues :

HAProxy was updated to 2.0.10 &#9; 

Security issues fixed :

  - CVE-2019-18277: Fixed a potential HTTP smuggling in     messages with transfer-encoding header missing the     'chunked' (bsc#1154980).

  - Fixed an improper handling of headers which could have     led to injecting LFs in H2-to-H1 transfers creating new     attack space (bsc#1157712)

  - Fixed an issue where HEADER frames in idle streams are     not rejected and thus trying to decode them HAPrpxy     crashes (bsc#1157714).

Other issue addressed :

  - Macro change in the spec file (bsc#1082318)

More information regarding the release at:
http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d46151555 1b95daae20954b3053ce87e&#9; 

This update was imported from the SUSE:SLE-15-SP1:Update update project.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3034 advisory.

  - An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due     to a missing check when validating DNS responses, remote attackers might be able read the 16 bytes     corresponding to an AAAA record from the non-initialized part of the buffer, possibly accessing anything     that was left on the stack, or even past the end of the 8193-byte buffer, depending on the value of     accepted_payload_size. (CVE-2018-20102)

  - An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted     packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of     valid pointers resulting in stack exhaustion. (CVE-2018-20103)

  - A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header     missing the chunked value were not being correctly rejected. The impact was limited but if combined with     the http-reuse always setting, it could be used to help construct an HTTP request smuggling attack     against a vulnerable component employing a lenient parser that would ignore the content-length header as     soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).
    (CVE-2019-18277)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1936 advisory.

  - haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated chunked     value (CVE-2019-18277)

  - haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)

  - haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes (CVE-2020-11100)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-267:02 advisory.

    * haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated chunked     value (CVE-2019-18277)
      * haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
131688	openSUSE Security Update : haproxy (openSUSE-2019-2626)	Nessus	SuSE Local Security Checks	2019/12/4	2024/4/5	high
130587	Ubuntu 16.04 LTS / 18.04 LTS : HAproxy vulnerability (USN-4174-1)	Nessus	Ubuntu Local Security Checks	2019/11/6	2024/8/28	high
132542	Photon OS 2.0: Haproxy PHSA-2019-2.0-0187	Nessus	PhotonOS Local Security Checks	2019/12/31	2024/7/22	high
132589	Photon OS 3.0: Haproxy PHSA-2019-3.0-0038	Nessus	PhotonOS Local Security Checks	2020/1/2	2024/7/22	high
170315	RHEL 7 : rh-haproxy18-haproxy (RHSA-2020:2265)	Nessus	Red Hat Local Security Checks	2023/1/23	2024/11/7	critical
170348	RHEL 7 : OpenShift Container Platform 3.11 (RHSA-2020:1287)	Nessus	Red Hat Local Security Checks	2023/1/23	2024/11/7	critical
131721	openSUSE Security Update : haproxy (openSUSE-2019-2645)	Nessus	SuSE Local Security Checks	2019/12/5	2024/4/5	high
161700	Debian DLA-3034-1 : haproxy - LTS security update	Nessus	Debian Local Security Checks	2022/5/31	2023/10/26	high
312490	RHCOS 4 : OpenShift Container Platform 4.4.3 haproxy (RHSA-2020:1936)	Nessus	Red Hat Local Security Checks	2026/5/6	2026/5/6	critical
293941	MiracleLinux 8 : haproxy-1.8.23-3.el8 (AXSA:2020-267:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical

检测

插件搜索

high

high

high

high

critical

critical

high

high

critical

critical