Skip to content
Sign in
7.5 High

CVE-2023-0836 An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before…

Description

An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to configured FastCGI backends in an unexpected way.

Affected products and versions

Product Affected versions Fixed in
haproxy Versions not published

Other CVEs of haproxy

The 3 CVEs of haproxy →
CVE-2023-0056 An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service 6.5 Medium CVE-2022-0711 A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header Not rated
Track this CVE