ALT-PU-2023-2370-1
Package haproxy updated to version 2.6.8-alt2 for branch sisyphus_mipsel.
Closed vulnerabilities
Published: 2023-04-11
Modified: 2025-02-11
Modified: 2025-02-11
CVE-2023-25950
HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition.
Severity: HIGH (7.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References:
- https://git.haproxy.org/?p=haproxy-2.7.git%3Ba=commit%3Bh=3ca4223c5e1f18a19dc93b0b09ffdbd295554d46
- https://git.haproxy.org/?p=haproxy-2.7.git%3Ba=commit%3Bh=3ca4223c5e1f18a19dc93b0b09ffdbd295554d46
- https://jvn.jp/en/jp/JVN38170084/
- https://jvn.jp/en/jp/JVN38170084/
- https://www.haproxy.org/
- https://www.haproxy.org/
Closed bugs
сервис haproxy не запускается