Aller au contenu
Se connecter
7.5 Élevée

CVE-2023-0836 An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before…

Description

An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to configured FastCGI backends in an unexpected way.

Produits et versions touchés

Produit Versions touchées Corrigé en
haproxy Versions non publiées

Autres CVE de haproxy

Les 3 CVE de haproxy →
CVE-2023-0056 An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service 6.5 Moyenne CVE-2022-0711 A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header Non notée
Suivre cette CVE