The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5348 advisory.

  - HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in     some situations, aka request smuggling. The HTTP header parsers in HAProxy may accept empty header field     names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after     being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because     the headers disappear before being parsed and processed, as if they had not been sent by the client. The     fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31. (CVE-2023-25725)

  - An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the     service. This issue could allow an authenticated remote attacker to run a specially crafted malicious     server in an OpenShift cluster. The biggest impact is to availability. (CVE-2023-0056)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0413-1 advisory.

    - CVE-2023-25725: Fixed a serious vulnerability in the HTTP/1 parser (bsc#1208132).
    - CVE-2023-0056: Fixed denial of service via crash in http_wait_for_response() (bsc#1207181).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the     service. This issue could allow an authenticated remote attacker to run a specially crafted malicious     server in an OpenShift cluster. The biggest impact is to availability. (CVE-2023-0056)

  - HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in     some situations, aka 'request smuggling.' The HTTP header parsers in HAProxy may accept empty header field     names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after     being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because     the headers disappear before being parsed and processed, as if they had not been sent by the client. The     fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31. (CVE-2023-25725)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0053 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-0056:
    An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the     service. This issue could allow an authenticated remote attacker to run a specially crafted malicious     server in an OpenShift cluster. The biggest impact is to availability.

    CVE-2023-0836:
    An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before     2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the     connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to     configured FastCGI backends in an unexpected way.

    CVE-2023-25725:
    HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in     some situations, aka request smuggling. The HTTP header parsers in HAProxy may accept empty header field     names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after     being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because     the headers disappear before being parsed and processed, as if they had not been sent by the client. The     fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-1696 advisory.

    - Reject empty http header field names (CVE-2023-25725, #2174174)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5819-1 advisory.

    It was discovered that HAProxy incorrectly handled certain messages. A remote attacker could possibly use     this issue to cause HAProxy to stop responding, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0412-1 advisory.

    - CVE-2023-25725: Fixed a serious vulnerability in the HTTP/1 parser (bsc#1208132).
    - CVE-2023-0056: Fixed denial of service via crash in http_wait_for_response() (bsc#1207181).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:1978 advisory.

    The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based     applications.

    Security Fix(es):

    * haproxy: segfault DoS (CVE-2023-0056)

    * haproxy: request smuggling attack in HTTP/1 header parsing (CVE-2023-25725)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0727 advisory.

  - golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers     (CVE-2022-2879)

  - golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)

  - golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

  - golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

  - haproxy: segfault DoS (CVE-2023-0056)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the haproxy package has been released.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-7e04833463 advisory.

    Security fix for CVE-2023-0056, CVE-2023-25725

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:1696 advisory.

    The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based     applications.

    Security Fix(es):

    * haproxy: segfault DoS (CVE-2023-0056)

    * haproxy: request smuggling attack in HTTP/1 header parsing (CVE-2023-25725)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the haproxy-2.4.17-6.el9 build changelog.

  - An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the     service. This issue could allow an authenticated remote attacker to run a specially crafted malicious     server in an OpenShift cluster. The biggest impact is to availability. (CVE-2023-0056)

  - HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in     some situations, aka request smuggling. The HTTP header parsers in HAProxy may accept empty header field     names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after     being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because     the headers disappear before being parsed and processed, as if they had not been sent by the client. The     fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31. (CVE-2023-25725)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
171500	Debian DSA-5348-1 : haproxy - security update	Nessus	Debian Local Security Checks	2023/2/15	2023/9/4	critical
171503	SUSE SLES15 Security Update : haproxy (SUSE-SU-2023:0413-1)	Nessus	SuSE Local Security Checks	2023/2/15	2026/6/26	critical
177975	EulerOS 2.0 SP11 : haproxy (EulerOS-SA-2023-2293)	Nessus	Huawei Local Security Checks	2023/7/4	2023/7/4	critical
236024	Alibaba Cloud Linux 3 : 0053: haproxy (ALINUX3-SA-2024:0053)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical
174143	Oracle Linux 9 : haproxy (ELSA-2023-1696)	Nessus	Oracle Linux Local Security Checks	2023/4/12	2024/10/22	critical
170417	Ubuntu 20.04 LTS / 22.04 LTS : HAProxy vulnerability (USN-5819-1)	Nessus	Ubuntu Local Security Checks	2023/1/23	2024/8/27	medium
171504	SUSE SLES15 Security Update : haproxy (SUSE-SU-2023:0412-1)	Nessus	SuSE Local Security Checks	2023/2/15	2026/6/26	critical
174727	RHEL 9 : haproxy (RHSA-2023:1978)	Nessus	Red Hat Local Security Checks	2023/4/25	2024/11/7	critical
189451	RHCOS 4 : OpenShift Container Platform 4.12.3 (RHSA-2023:0727)	Nessus	Red Hat Local Security Checks	2024/1/24	2026/5/4	high
203435	Photon OS 4.0: Haproxy PHSA-2023-4.0-0373	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	high
171912	Fedora 36 : haproxy (2023-7e04833463)	Nessus	Fedora Local Security Checks	2023/2/25	2024/11/14	critical
174131	RHEL 9 : haproxy (RHSA-2023:1696)	Nessus	Red Hat Local Security Checks	2023/4/11	2024/11/7	critical
191411	CentOS 9 : haproxy-2.4.17-6.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	critical

检测

插件搜索

critical

critical

critical

critical

critical

medium

critical

critical

high

high

critical

critical

critical