Action not permitted
Modal body text goes here.
cve-2019-19330
Vulnerability from cvelistv5
Published
2019-11-27 15:53
Modified
2024-08-05 02:16
Severity ?
EPSS score ?
Summary
The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T02:16:46.867Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=54f53ef7ce4102be596130b44c768d1818570344" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=146f53ae7e97dbfe496d0445c2802dd0a30b0878" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://git.haproxy.org/?p=haproxy-2.0.git%3Ba=commit%3Bh=ac198b92d461515551b95daae20954b3053ce87e" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://tools.ietf.org/html/rfc7540#section-10.3" }, { "name": "DSA-4577", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "https://www.debian.org/security/2019/dsa-4577" }, { "name": "20191128 [SECURITY] [DSA 4577-1] haproxy security update", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "url": "https://seclists.org/bugtraq/2019/Nov/45" }, { "name": "USN-4212-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "https://usn.ubuntu.com/4212-1/" }, { "name": "GLSA-202004-01", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/202004-01" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "descriptions": [ { "lang": "en", "value": "The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2020-04-01T20:06:11", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=54f53ef7ce4102be596130b44c768d1818570344" }, { "tags": [ "x_refsource_MISC" ], "url": "https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=146f53ae7e97dbfe496d0445c2802dd0a30b0878" }, { "tags": [ "x_refsource_MISC" ], "url": "https://git.haproxy.org/?p=haproxy-2.0.git%3Ba=commit%3Bh=ac198b92d461515551b95daae20954b3053ce87e" }, { "tags": [ "x_refsource_MISC" ], "url": "https://tools.ietf.org/html/rfc7540#section-10.3" }, { "name": "DSA-4577", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "https://www.debian.org/security/2019/dsa-4577" }, { "name": "20191128 [SECURITY] [DSA 4577-1] haproxy security update", "tags": [ "mailing-list", "x_refsource_BUGTRAQ" ], "url": "https://seclists.org/bugtraq/2019/Nov/45" }, { "name": "USN-4212-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "https://usn.ubuntu.com/4212-1/" }, { "name": "GLSA-202004-01", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/202004-01" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-19330", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344", "refsource": "MISC", "url": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344" }, { "name": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878", "refsource": "MISC", "url": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878" }, { "name": "https://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e", "refsource": "MISC", "url": "https://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e" }, { "name": "https://tools.ietf.org/html/rfc7540#section-10.3", "refsource": "MISC", "url": "https://tools.ietf.org/html/rfc7540#section-10.3" }, { "name": "DSA-4577", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2019/dsa-4577" }, { "name": "20191128 [SECURITY] [DSA 4577-1] haproxy security update", "refsource": "BUGTRAQ", "url": "https://seclists.org/bugtraq/2019/Nov/45" }, { "name": "USN-4212-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4212-1/" }, { "name": "GLSA-202004-01", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/202004-01" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-19330", "datePublished": "2019-11-27T15:53:26", "dateReserved": "2019-11-27T00:00:00", "dateUpdated": "2024-08-05T02:16:46.867Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2019-19330\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2019-11-27T16:15:11.720\",\"lastModified\":\"2023-11-07T03:07:37.857\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.\"},{\"lang\":\"es\",\"value\":\"La implementaci\u00f3n de HTTP/2 en HAProxy versiones anteriores a la versi\u00f3n 2.0.10, maneja inapropiadamente los encabezados, como es demostrado por el retorno de carro (CR, ASCII 0xd), salto de l\u00ednea (LF, ASCII 0xa) y el car\u00e1cter cero (NUL, ASCII 0x0), tambi\u00e9n se conoce como Ataques de Encapsulaci\u00f3n Intermedia .\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\",\"baseScore\":7.5},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-74\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.0.10\",\"matchCriteriaId\":\"9FB4A64D-7A83-4A92-9F0B-0450A822029F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD783B0C-9246-47D9-A937-6144FE8BFF0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A31C8344-3E02-4EB8-8BD8-4C84B7959624\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]}],\"references\":[{\"url\":\"https://git.haproxy.org/?p=haproxy-2.0.git%3Ba=commit%3Bh=ac198b92d461515551b95daae20954b3053ce87e\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=146f53ae7e97dbfe496d0445c2802dd0a30b0878\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=54f53ef7ce4102be596130b44c768d1818570344\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://seclists.org/bugtraq/2019/Nov/45\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202004-01\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://tools.ietf.org/html/rfc7540#section-10.3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4212-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4577\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
ghsa-x4px-pm9c-vmjm
Vulnerability from github
Published
2022-05-24 17:02
Modified
2024-04-04 02:41
Severity ?
Details
The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.
{ "affected": [], "aliases": [ "CVE-2019-19330" ], "database_specific": { "cwe_ids": [ "CWE-74" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2019-11-27T16:15:00Z", "severity": "CRITICAL" }, "details": "The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.", "id": "GHSA-x4px-pm9c-vmjm", "modified": "2024-04-04T02:41:11Z", "published": "2022-05-24T17:02:19Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19330" }, { "type": "WEB", "url": "https://git.haproxy.org/?p=haproxy-2.0.git%3Ba=commit%3Bh=ac198b92d461515551b95daae20954b3053ce87e" }, { "type": "WEB", "url": "https://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e" }, { "type": "WEB", "url": "https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=146f53ae7e97dbfe496d0445c2802dd0a30b0878" }, { "type": "WEB", "url": "https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=54f53ef7ce4102be596130b44c768d1818570344" }, { "type": "WEB", "url": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878" }, { "type": "WEB", "url": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344" }, { "type": "WEB", "url": "https://seclists.org/bugtraq/2019/Nov/45" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/202004-01" }, { "type": "WEB", "url": "https://tools.ietf.org/html/rfc7540#section-10.3" }, { "type": "WEB", "url": "https://usn.ubuntu.com/4212-1" }, { "type": "WEB", "url": "https://www.debian.org/security/2019/dsa-4577" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" } ] }
rhsa-2020_1287
Vulnerability from csaf_redhat
Published
2020-04-07 19:44
Modified
2024-11-15 08:28
Summary
Red Hat Security Advisory: OpenShift Container Platform 3.11 security update
Notes
Topic
Red Hat OpenShift Container Platform release 3.11.200 is now available with
updates to packages and images that fix several bugs.
Red Hat Product Security has rated this update as having a security impact
of Critical. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes (CVE-2020-11100)
* haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value (CVE-2019-18277)
* haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s)
listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat OpenShift Container Platform release 3.11.200 is now available with\nupdates to packages and images that fix several bugs.\n\nRed Hat Product Security has rated this update as having a security impact\nof Critical. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSecurity Fix(es):\n\n* haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes (CVE-2020-11100)\n\n* haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value (CVE-2019-18277)\n\n* haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s)\nlisted in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:1287", "url": "https://access.redhat.com/errata/RHSA-2020:1287" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "1759697", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1759697" }, { "category": "external", "summary": "1777584", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1777584" }, { "category": "external", "summary": "1819111", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819111" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1287.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 3.11 security update", "tracking": { "current_release_date": "2024-11-15T08:28:54+00:00", "generator": { "date": "2024-11-15T08:28:54+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:1287", "initial_release_date": "2020-04-07T19:44:40+00:00", "revision_history": [ { "date": "2020-04-07T19:44:40+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-04-07T19:44:40+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-15T08:28:54+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.11", "product": { "name": "Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.11::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "haproxy-0:1.8.23-3.el7.src", "product": { "name": "haproxy-0:1.8.23-3.el7.src", "product_id": "haproxy-0:1.8.23-3.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@1.8.23-3.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "haproxy18-0:1.8.23-3.el7.ppc64le", "product": { "name": "haproxy18-0:1.8.23-3.el7.ppc64le", "product_id": "haproxy18-0:1.8.23-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy18@1.8.23-3.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "product": { "name": "haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "product_id": "haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debuginfo@1.8.23-3.el7?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "haproxy18-0:1.8.23-3.el7.x86_64", "product": { "name": "haproxy18-0:1.8.23-3.el7.x86_64", "product_id": "haproxy18-0:1.8.23-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy18@1.8.23-3.el7?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "product": { "name": "haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "product_id": "haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debuginfo@1.8.23-3.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:1.8.23-3.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src" }, "product_reference": "haproxy-0:1.8.23-3.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debuginfo-0:1.8.23-3.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le" }, "product_reference": "haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debuginfo-0:1.8.23-3.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64" }, "product_reference": "haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy18-0:1.8.23-3.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le" }, "product_reference": "haproxy18-0:1.8.23-3.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy18-0:1.8.23-3.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" }, "product_reference": "haproxy18-0:1.8.23-3.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-18277", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2019-10-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1759697" } ], "notes": [ { "category": "description", "text": "A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the \"chunked\" value were not being correctly rejected. The impact was limited but if combined with the \"http-reuse always\" setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value", "title": "Vulnerability summary" }, { "category": "other", "text": "To exploit this vulnerability a vulnerable backend server is required. In particular the server should incorrectly parse the Transfer-Encoding HTTP header.\n\nThis issue did not affect the versions of haproxy as shipped with Red Hat Enterprise Linux 6, and 7 as they did not include support for `http-reuse` option.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-18277" }, { "category": "external", "summary": "RHBZ#1759697", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1759697" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-18277", "url": "https://www.cve.org/CVERecord?id=CVE-2019-18277" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-18277", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18277" } ], "release_date": "2019-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-04-07T19:44:40+00:00", "details": "Before applying this update, ensure all previously released errata relevant\nto your system is applied.\n\nSee the following documentation, which will be updated shortly for release\n3.11.200, for important instructions on how to upgrade your cluster and fully\napply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258.", "product_ids": [ "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:1287" }, { "category": "workaround", "details": "- Reconsider the use of `http-reuse always` if possible\n- Disable HTTP Keep-Alive (also called HTTP Connection reuse) in the backend\n- Fix the backend server to correctly parse Transfer-Encoding/Content-Length headers", "product_ids": [ "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value" }, { "cve": "CVE-2019-19330", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-11-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1777584" } ], "notes": [ { "category": "description", "text": "The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks", "title": "Vulnerability summary" }, { "category": "other", "text": "Support for HTTP/2 protocol was added to haproxy in version 1.8, therefore previous versions are not affected by this flaw.\n\nThe version of haproxy shipped in OpenShift Container Platform 4 contains the vulnerable code, however exploitation requires setting ROUTER_USE_HTTP2 in the OpenShift Ingress Operator, which is not currently possible. The impact of this vulnerability is therefore reduced in OpenShift Container Platform 4 to Low.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19330" }, { "category": "external", "summary": "RHBZ#1777584", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1777584" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19330", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19330" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19330", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19330" } ], "release_date": "2019-11-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-04-07T19:44:40+00:00", "details": "Before applying this update, ensure all previously released errata relevant\nto your system is applied.\n\nSee the following documentation, which will be updated shortly for release\n3.11.200, for important instructions on how to upgrade your cluster and fully\napply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258.", "product_ids": [ "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:1287" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks" }, { "acknowledgments": [ { "names": [ "the HAProxy project" ] }, { "names": [ "Felix Wilhelm" ], "organization": "Google Project Zero", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-11100", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2020-03-29T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1819111" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way HAProxy processed certain HTTP/2 request packets. This flaw allows an attacker to send crafted HTTP/2 request packets, which cause memory corruption, leading to a crash or potential remote arbitrary code execution with the permissions of the user running HAProxy.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes", "title": "Vulnerability summary" }, { "category": "other", "text": "HAProxy packages shipped with Red Hat Enterprise Linux 6 and 7 do not contain support for HTTP/2; therefore, they are not affected by this flaw.\n\nOpenShift Container Platform versions through 4.3 contain the vulnerable code; exploitation requires setting ROUTER_USE_HTTP2 in the OpenShift Ingress Operator, which is not currently possible. The impact of this vulnerability is therefore reduced in OCP 4.x, prior to version 4.4, to low.\n\nOpenShift Container Platform 3.11 added a configuration option to ose-haproxy-router that made enabling HTTP/2 support easy. However, it is not enabled by default on that version.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-11100" }, { "category": "external", "summary": "RHBZ#1819111", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819111" }, { "category": "external", "summary": "RHSB-haproxy", "url": "https://access.redhat.com/security/vulnerabilities/haproxy" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11100", "url": "https://www.cve.org/CVERecord?id=CVE-2020-11100" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11100", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11100" }, { "category": "external", "summary": "https://bugs.chromium.org/p/project-zero/issues/detail?id=2023", "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=2023" }, { "category": "external", "summary": "https://www.haproxy.com/blog/haproxy-1-8-http-2-hpack-decoder-vulnerability-fixed/", "url": "https://www.haproxy.com/blog/haproxy-1-8-http-2-hpack-decoder-vulnerability-fixed/" }, { "category": "external", "summary": "https://www.mail-archive.com/haproxy@formilux.org/msg36876.html", "url": "https://www.mail-archive.com/haproxy@formilux.org/msg36876.html" } ], "release_date": "2020-04-02T13:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-04-07T19:44:40+00:00", "details": "Before applying this update, ensure all previously released errata relevant\nto your system is applied.\n\nSee the following documentation, which will be updated shortly for release\n3.11.200, for important instructions on how to upgrade your cluster and fully\napply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258.", "product_ids": [ "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:1287" }, { "category": "workaround", "details": "This issue can be mitigated by not enabling support for HTTP/2 protocol. Upstream suggests that HTTP/2 can be enabled per front-end server by using the following documentation: https://www.haproxy.com/documentation/hapee/1-8r1/traffic-management/enable-http2-protocol/.\n\nYou can check if http2 is enabled by searching your haproxy configuration files for a line containing \u0027h2\u0027.\n\nTo mitigate this vulnerability in OpenShift Container Platform 3.11, keep HTTP/2 disabled as it is by default. You can verify if HTTP/2 support is enabled or not by following the instructions in following article: https://access.redhat.com/security/vulnerabilities/haproxy\n\nOn Red Hat Enterprise Linux 8, haproxy is confined by SELinux, which should mitigate remote arbitrary code execution.", "product_ids": [ "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-3.11:haproxy-0:1.8.23-3.el7.src", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy-debuginfo-0:1.8.23-3.el7.x86_64", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.ppc64le", "7Server-RH7-RHOSE-3.11:haproxy18-0:1.8.23-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes" } ] }
rhsa-2020_2265
Vulnerability from csaf_redhat
Published
2020-05-26 10:43
Modified
2024-11-15 04:21
Summary
Red Hat Security Advisory: rh-haproxy18-haproxy security, bug fix, and enhancement update
Notes
Topic
An update for rh-haproxy18-haproxy is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments.
The following packages have been upgraded to a later upstream version: rh-haproxy18-haproxy (1.8.24). (BZ#1774747)
Security Fix(es):
* haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value (CVE-2019-18277)
* haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Software Collections 3.5 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for rh-haproxy18-haproxy is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments.\n\nThe following packages have been upgraded to a later upstream version: rh-haproxy18-haproxy (1.8.24). (BZ#1774747)\n\nSecurity Fix(es):\n\n* haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value (CVE-2019-18277)\n\n* haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Software Collections 3.5 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:2265", "url": "https://access.redhat.com/errata/RHSA-2020:2265" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.5_release_notes/", "url": "https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.5_release_notes/" }, { "category": "external", "summary": "1759697", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1759697" }, { "category": "external", "summary": "1774747", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774747" }, { "category": "external", "summary": "1777584", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1777584" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2265.json" } ], "title": "Red Hat Security Advisory: rh-haproxy18-haproxy security, bug fix, and enhancement update", "tracking": { "current_release_date": "2024-11-15T04:21:02+00:00", "generator": { "date": "2024-11-15T04:21:02+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:2265", "initial_release_date": "2020-05-26T10:43:03+00:00", "revision_history": [ { "date": "2020-05-26T10:43:03+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-05-26T10:43:03+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-15T04:21:02+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.5", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.5", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.5-7.6.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.5-7.7.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } } ], "category": "product_family", "name": "Red Hat Software Collections" }, { "branches": [ { "category": "product_version", "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "product": { "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "product_id": "rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-haproxy18-haproxy@1.8.24-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "product": { "name": "rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "product_id": "rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-haproxy18-haproxy-syspaths@1.8.24-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "product": { "name": "rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "product_id": "rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-haproxy18-haproxy-debuginfo@1.8.24-2.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "product": { "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "product_id": "rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-haproxy18-haproxy@1.8.24-2.el7?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src" }, "product_reference": "rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.5-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.5-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.5-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.5-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src" }, "product_reference": "rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.5-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.5-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.5-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.5-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src" }, "product_reference": "rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src" }, "product_reference": "rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64" }, "product_reference": "rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.5" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-18277", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2019-10-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1759697" } ], "notes": [ { "category": "description", "text": "A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the \"chunked\" value were not being correctly rejected. The impact was limited but if combined with the \"http-reuse always\" setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value", "title": "Vulnerability summary" }, { "category": "other", "text": "To exploit this vulnerability a vulnerable backend server is required. In particular the server should incorrectly parse the Transfer-Encoding HTTP header.\n\nThis issue did not affect the versions of haproxy as shipped with Red Hat Enterprise Linux 6, and 7 as they did not include support for `http-reuse` option.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-18277" }, { "category": "external", "summary": "RHBZ#1759697", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1759697" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-18277", "url": "https://www.cve.org/CVERecord?id=CVE-2019-18277" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-18277", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18277" } ], "release_date": "2019-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-05-26T10:43:03+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:2265" }, { "category": "workaround", "details": "- Reconsider the use of `http-reuse always` if possible\n- Disable HTTP Keep-Alive (also called HTTP Connection reuse) in the backend\n- Fix the backend server to correctly parse Transfer-Encoding/Content-Length headers", "product_ids": [ "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value" }, { "cve": "CVE-2019-19330", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-11-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1777584" } ], "notes": [ { "category": "description", "text": "The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks", "title": "Vulnerability summary" }, { "category": "other", "text": "Support for HTTP/2 protocol was added to haproxy in version 1.8, therefore previous versions are not affected by this flaw.\n\nThe version of haproxy shipped in OpenShift Container Platform 4 contains the vulnerable code, however exploitation requires setting ROUTER_USE_HTTP2 in the OpenShift Ingress Operator, which is not currently possible. The impact of this vulnerability is therefore reduced in OpenShift Container Platform 4 to Low.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19330" }, { "category": "external", "summary": "RHBZ#1777584", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1777584" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19330", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19330" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19330", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19330" } ], "release_date": "2019-11-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-05-26T10:43:03+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:2265" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.6.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5-7.7.Z:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Server-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.src", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-debuginfo-0:1.8.24-2.el7.x86_64", "7Workstation-RHSCL-3.5:rh-haproxy18-haproxy-syspaths-0:1.8.24-2.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks" } ] }
rhsa-2020_1936
Vulnerability from csaf_redhat
Published
2020-05-04 10:18
Modified
2024-11-15 08:29
Summary
Red Hat Security Advisory: OpenShift Container Platform 4.4.3 haproxy security update
Notes
Topic
An update for haproxy is now available for Red Hat OpenShift Container
Platform 4.4.
Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* haproxy: malformed HTTP/2 requests could lead to out-of-bounds writes (CVE-2020-11100)
* haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value (CVE-2019-18277)
* haproxy: HTTP/2 implementation was vulnerable to intermediary encapsulation attacks (CVE-2019-19330)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s)
listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for haproxy is now available for Red Hat OpenShift Container\nPlatform 4.4.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSecurity Fix(es):\n\n* haproxy: malformed HTTP/2 requests could lead to out-of-bounds writes (CVE-2020-11100)\n\n* haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value (CVE-2019-18277)\n\n* haproxy: HTTP/2 implementation was vulnerable to intermediary encapsulation attacks (CVE-2019-19330)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s)\nlisted in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:1936", "url": "https://access.redhat.com/errata/RHSA-2020:1936" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1759697", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1759697" }, { "category": "external", "summary": "1777584", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1777584" }, { "category": "external", "summary": "1819111", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819111" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1936.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.4.3 haproxy security update", "tracking": { "current_release_date": "2024-11-15T08:29:51+00:00", "generator": { "date": "2024-11-15T08:29:51+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:1936", "initial_release_date": "2020-05-04T10:18:55+00:00", "revision_history": [ { "date": "2020-05-04T10:18:55+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-05-04T10:18:55+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-15T08:29:51+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.4", "product": { "name": "Red Hat OpenShift Container Platform 4.4", "product_id": "7Server-RH7-RHOSE-4.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.4::el7" } } }, { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.4", "product": { "name": "Red Hat OpenShift Container Platform 4.4", "product_id": "8Base-RHOSE-4.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.4::el8" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "haproxy-0:2.0.13-3.el7.src", "product": { "name": "haproxy-0:2.0.13-3.el7.src", "product_id": "haproxy-0:2.0.13-3.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@2.0.13-3.el7?arch=src" } } }, { "category": "product_version", "name": "haproxy-0:2.0.13-3.el8.src", "product": { "name": "haproxy-0:2.0.13-3.el8.src", "product_id": "haproxy-0:2.0.13-3.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@2.0.13-3.el8?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "haproxy20-0:2.0.13-3.el7.x86_64", "product": { "name": "haproxy20-0:2.0.13-3.el7.x86_64", "product_id": "haproxy20-0:2.0.13-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20@2.0.13-3.el7?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "product": { "name": "haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "product_id": "haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debuginfo@2.0.13-3.el7?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy20-0:2.0.13-3.el8.x86_64", "product": { "name": "haproxy20-0:2.0.13-3.el8.x86_64", "product_id": "haproxy20-0:2.0.13-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20@2.0.13-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:2.0.13-3.el8.x86_64", "product": { "name": "haproxy-debugsource-0:2.0.13-3.el8.x86_64", "product_id": "haproxy-debugsource-0:2.0.13-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.0.13-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy20-debuginfo-0:2.0.13-3.el8.x86_64", "product": { "name": "haproxy20-debuginfo-0:2.0.13-3.el8.x86_64", "product_id": "haproxy20-debuginfo-0:2.0.13-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20-debuginfo@2.0.13-3.el8?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:2.0.13-3.el7.src as a component of Red Hat OpenShift Container Platform 4.4", "product_id": "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src" }, "product_reference": "haproxy-0:2.0.13-3.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.4" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debuginfo-0:2.0.13-3.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.4", "product_id": "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64" }, "product_reference": "haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.4" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-0:2.0.13-3.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.4", "product_id": "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64" }, "product_reference": "haproxy20-0:2.0.13-3.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.4" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:2.0.13-3.el8.src as a component of Red Hat OpenShift Container Platform 4.4", "product_id": "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src" }, "product_reference": "haproxy-0:2.0.13-3.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.4" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.0.13-3.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.4", "product_id": "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64" }, "product_reference": "haproxy-debugsource-0:2.0.13-3.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.4" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-0:2.0.13-3.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.4", "product_id": "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64" }, "product_reference": "haproxy20-0:2.0.13-3.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.4" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-debuginfo-0:2.0.13-3.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.4", "product_id": "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" }, "product_reference": "haproxy20-debuginfo-0:2.0.13-3.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.4" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-18277", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2019-10-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1759697" } ], "notes": [ { "category": "description", "text": "A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the \"chunked\" value were not being correctly rejected. The impact was limited but if combined with the \"http-reuse always\" setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value", "title": "Vulnerability summary" }, { "category": "other", "text": "To exploit this vulnerability a vulnerable backend server is required. In particular the server should incorrectly parse the Transfer-Encoding HTTP header.\n\nThis issue did not affect the versions of haproxy as shipped with Red Hat Enterprise Linux 6, and 7 as they did not include support for `http-reuse` option.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src", "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64", "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src", "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-18277" }, { "category": "external", "summary": "RHBZ#1759697", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1759697" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-18277", "url": "https://www.cve.org/CVERecord?id=CVE-2019-18277" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-18277", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18277" } ], "release_date": "2019-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-05-04T10:18:55+00:00", "details": "For OpenShift Container Platform 4.4 see the following documentation, which\nwill be updated shortly for release 4.4.3, for important instructions on\nhow to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.", "product_ids": [ "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src", "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64", "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src", "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:1936" }, { "category": "workaround", "details": "- Reconsider the use of `http-reuse always` if possible\n- Disable HTTP Keep-Alive (also called HTTP Connection reuse) in the backend\n- Fix the backend server to correctly parse Transfer-Encoding/Content-Length headers", "product_ids": [ "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src", "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64", "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src", "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src", "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64", "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src", "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value" }, { "cve": "CVE-2019-19330", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-11-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1777584" } ], "notes": [ { "category": "description", "text": "The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks", "title": "Vulnerability summary" }, { "category": "other", "text": "Support for HTTP/2 protocol was added to haproxy in version 1.8, therefore previous versions are not affected by this flaw.\n\nThe version of haproxy shipped in OpenShift Container Platform 4 contains the vulnerable code, however exploitation requires setting ROUTER_USE_HTTP2 in the OpenShift Ingress Operator, which is not currently possible. The impact of this vulnerability is therefore reduced in OpenShift Container Platform 4 to Low.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src", "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64", "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src", "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19330" }, { "category": "external", "summary": "RHBZ#1777584", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1777584" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19330", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19330" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19330", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19330" } ], "release_date": "2019-11-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-05-04T10:18:55+00:00", "details": "For OpenShift Container Platform 4.4 see the following documentation, which\nwill be updated shortly for release 4.4.3, for important instructions on\nhow to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.", "product_ids": [ "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src", "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64", "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src", "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:1936" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src", "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64", "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src", "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks" }, { "acknowledgments": [ { "names": [ "the HAProxy project" ] }, { "names": [ "Felix Wilhelm" ], "organization": "Google Project Zero", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-11100", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2020-03-29T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1819111" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way HAProxy processed certain HTTP/2 request packets. This flaw allows an attacker to send crafted HTTP/2 request packets, which cause memory corruption, leading to a crash or potential remote arbitrary code execution with the permissions of the user running HAProxy.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes", "title": "Vulnerability summary" }, { "category": "other", "text": "HAProxy packages shipped with Red Hat Enterprise Linux 6 and 7 do not contain support for HTTP/2; therefore, they are not affected by this flaw.\n\nOpenShift Container Platform versions through 4.3 contain the vulnerable code; exploitation requires setting ROUTER_USE_HTTP2 in the OpenShift Ingress Operator, which is not currently possible. The impact of this vulnerability is therefore reduced in OCP 4.x, prior to version 4.4, to low.\n\nOpenShift Container Platform 3.11 added a configuration option to ose-haproxy-router that made enabling HTTP/2 support easy. However, it is not enabled by default on that version.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src", "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64", "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src", "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-11100" }, { "category": "external", "summary": "RHBZ#1819111", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819111" }, { "category": "external", "summary": "RHSB-haproxy", "url": "https://access.redhat.com/security/vulnerabilities/haproxy" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-11100", "url": "https://www.cve.org/CVERecord?id=CVE-2020-11100" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11100", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11100" }, { "category": "external", "summary": "https://bugs.chromium.org/p/project-zero/issues/detail?id=2023", "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=2023" }, { "category": "external", "summary": "https://www.haproxy.com/blog/haproxy-1-8-http-2-hpack-decoder-vulnerability-fixed/", "url": "https://www.haproxy.com/blog/haproxy-1-8-http-2-hpack-decoder-vulnerability-fixed/" }, { "category": "external", "summary": "https://www.mail-archive.com/haproxy@formilux.org/msg36876.html", "url": "https://www.mail-archive.com/haproxy@formilux.org/msg36876.html" } ], "release_date": "2020-04-02T13:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-05-04T10:18:55+00:00", "details": "For OpenShift Container Platform 4.4 see the following documentation, which\nwill be updated shortly for release 4.4.3, for important instructions on\nhow to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.", "product_ids": [ "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src", "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64", "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src", "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:1936" }, { "category": "workaround", "details": "This issue can be mitigated by not enabling support for HTTP/2 protocol. Upstream suggests that HTTP/2 can be enabled per front-end server by using the following documentation: https://www.haproxy.com/documentation/hapee/1-8r1/traffic-management/enable-http2-protocol/.\n\nYou can check if http2 is enabled by searching your haproxy configuration files for a line containing \u0027h2\u0027.\n\nTo mitigate this vulnerability in OpenShift Container Platform 3.11, keep HTTP/2 disabled as it is by default. You can verify if HTTP/2 support is enabled or not by following the instructions in following article: https://access.redhat.com/security/vulnerabilities/haproxy\n\nOn Red Hat Enterprise Linux 8, haproxy is confined by SELinux, which should mitigate remote arbitrary code execution.", "product_ids": [ "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src", "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64", "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src", "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.4:haproxy-0:2.0.13-3.el7.src", "7Server-RH7-RHOSE-4.4:haproxy-debuginfo-0:2.0.13-3.el7.x86_64", "7Server-RH7-RHOSE-4.4:haproxy20-0:2.0.13-3.el7.x86_64", "8Base-RHOSE-4.4:haproxy-0:2.0.13-3.el8.src", "8Base-RHOSE-4.4:haproxy-debugsource-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-0:2.0.13-3.el8.x86_64", "8Base-RHOSE-4.4:haproxy20-debuginfo-0:2.0.13-3.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes" } ] }
rhsa-2020_1725
Vulnerability from csaf_redhat
Published
2020-04-28 15:37
Modified
2024-11-15 04:19
Summary
Red Hat Security Advisory: haproxy security, bug fix, and enhancement update
Notes
Topic
An update for haproxy is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.
The following packages have been upgraded to a later upstream version: haproxy (1.8.23). (BZ#1774745)
Security Fix(es):
* haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value (CVE-2019-18277)
* haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for haproxy is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.\n\nThe following packages have been upgraded to a later upstream version: haproxy (1.8.23). (BZ#1774745)\n\nSecurity Fix(es):\n\n* haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value (CVE-2019-18277)\n\n* haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks (CVE-2019-19330)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:1725", "url": "https://access.redhat.com/errata/RHSA-2020:1725" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index", "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index" }, { "category": "external", "summary": "1759697", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1759697" }, { "category": "external", "summary": "1774745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774745" }, { "category": "external", "summary": "1777584", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1777584" }, { "category": "external", "summary": "1778844", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1778844" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1725.json" } ], "title": "Red Hat Security Advisory: haproxy security, bug fix, and enhancement update", "tracking": { "current_release_date": "2024-11-15T04:19:06+00:00", "generator": { "date": "2024-11-15T04:19:06+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:1725", "initial_release_date": "2020-04-28T15:37:42+00:00", "revision_history": [ { "date": "2020-04-28T15:37:42+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-04-28T15:37:42+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-15T04:19:06+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "haproxy-0:1.8.23-3.el8.ppc64le", "product": { "name": "haproxy-0:1.8.23-3.el8.ppc64le", "product_id": "haproxy-0:1.8.23-3.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@1.8.23-3.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:1.8.23-3.el8.ppc64le", "product": { "name": "haproxy-debugsource-0:1.8.23-3.el8.ppc64le", "product_id": "haproxy-debugsource-0:1.8.23-3.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@1.8.23-3.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "haproxy-debuginfo-0:1.8.23-3.el8.ppc64le", "product": { "name": "haproxy-debuginfo-0:1.8.23-3.el8.ppc64le", "product_id": "haproxy-debuginfo-0:1.8.23-3.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debuginfo@1.8.23-3.el8?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "haproxy-0:1.8.23-3.el8.s390x", "product": { "name": "haproxy-0:1.8.23-3.el8.s390x", "product_id": "haproxy-0:1.8.23-3.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@1.8.23-3.el8?arch=s390x" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:1.8.23-3.el8.s390x", "product": { "name": "haproxy-debugsource-0:1.8.23-3.el8.s390x", "product_id": "haproxy-debugsource-0:1.8.23-3.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@1.8.23-3.el8?arch=s390x" } } }, { "category": "product_version", "name": "haproxy-debuginfo-0:1.8.23-3.el8.s390x", "product": { "name": "haproxy-debuginfo-0:1.8.23-3.el8.s390x", "product_id": "haproxy-debuginfo-0:1.8.23-3.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debuginfo@1.8.23-3.el8?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "haproxy-0:1.8.23-3.el8.x86_64", "product": { "name": "haproxy-0:1.8.23-3.el8.x86_64", "product_id": "haproxy-0:1.8.23-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@1.8.23-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:1.8.23-3.el8.x86_64", "product": { "name": "haproxy-debugsource-0:1.8.23-3.el8.x86_64", "product_id": "haproxy-debugsource-0:1.8.23-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@1.8.23-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy-debuginfo-0:1.8.23-3.el8.x86_64", "product": { "name": "haproxy-debuginfo-0:1.8.23-3.el8.x86_64", "product_id": "haproxy-debuginfo-0:1.8.23-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debuginfo@1.8.23-3.el8?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "haproxy-0:1.8.23-3.el8.aarch64", "product": { "name": "haproxy-0:1.8.23-3.el8.aarch64", "product_id": "haproxy-0:1.8.23-3.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@1.8.23-3.el8?arch=aarch64" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:1.8.23-3.el8.aarch64", "product": { "name": "haproxy-debugsource-0:1.8.23-3.el8.aarch64", "product_id": "haproxy-debugsource-0:1.8.23-3.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@1.8.23-3.el8?arch=aarch64" } } }, { "category": "product_version", "name": "haproxy-debuginfo-0:1.8.23-3.el8.aarch64", "product": { "name": "haproxy-debuginfo-0:1.8.23-3.el8.aarch64", "product_id": "haproxy-debuginfo-0:1.8.23-3.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debuginfo@1.8.23-3.el8?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "haproxy-0:1.8.23-3.el8.src", "product": { "name": "haproxy-0:1.8.23-3.el8.src", "product_id": "haproxy-0:1.8.23-3.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@1.8.23-3.el8?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:1.8.23-3.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.aarch64" }, "product_reference": "haproxy-0:1.8.23-3.el8.aarch64", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:1.8.23-3.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.ppc64le" }, "product_reference": "haproxy-0:1.8.23-3.el8.ppc64le", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:1.8.23-3.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.s390x" }, "product_reference": "haproxy-0:1.8.23-3.el8.s390x", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:1.8.23-3.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.src" }, "product_reference": "haproxy-0:1.8.23-3.el8.src", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:1.8.23-3.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.x86_64" }, "product_reference": "haproxy-0:1.8.23-3.el8.x86_64", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debuginfo-0:1.8.23-3.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.aarch64" }, "product_reference": "haproxy-debuginfo-0:1.8.23-3.el8.aarch64", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debuginfo-0:1.8.23-3.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.ppc64le" }, "product_reference": "haproxy-debuginfo-0:1.8.23-3.el8.ppc64le", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debuginfo-0:1.8.23-3.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.s390x" }, "product_reference": "haproxy-debuginfo-0:1.8.23-3.el8.s390x", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debuginfo-0:1.8.23-3.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.x86_64" }, "product_reference": "haproxy-debuginfo-0:1.8.23-3.el8.x86_64", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:1.8.23-3.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.aarch64" }, "product_reference": "haproxy-debugsource-0:1.8.23-3.el8.aarch64", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:1.8.23-3.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.ppc64le" }, "product_reference": "haproxy-debugsource-0:1.8.23-3.el8.ppc64le", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:1.8.23-3.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.s390x" }, "product_reference": "haproxy-debugsource-0:1.8.23-3.el8.s390x", "relates_to_product_reference": "AppStream-8.2.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:1.8.23-3.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.x86_64" }, "product_reference": "haproxy-debugsource-0:1.8.23-3.el8.x86_64", "relates_to_product_reference": "AppStream-8.2.0.GA" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-18277", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2019-10-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1759697" } ], "notes": [ { "category": "description", "text": "A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the \"chunked\" value were not being correctly rejected. The impact was limited but if combined with the \"http-reuse always\" setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value", "title": "Vulnerability summary" }, { "category": "other", "text": "To exploit this vulnerability a vulnerable backend server is required. In particular the server should incorrectly parse the Transfer-Encoding HTTP header.\n\nThis issue did not affect the versions of haproxy as shipped with Red Hat Enterprise Linux 6, and 7 as they did not include support for `http-reuse` option.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.src", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-18277" }, { "category": "external", "summary": "RHBZ#1759697", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1759697" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-18277", "url": "https://www.cve.org/CVERecord?id=CVE-2019-18277" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-18277", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18277" } ], "release_date": "2019-09-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-04-28T15:37:42+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.src", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:1725" }, { "category": "workaround", "details": "- Reconsider the use of `http-reuse always` if possible\n- Disable HTTP Keep-Alive (also called HTTP Connection reuse) in the backend\n- Fix the backend server to correctly parse Transfer-Encoding/Content-Length headers", "product_ids": [ "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.src", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.src", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value" }, { "cve": "CVE-2019-19330", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-11-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1777584" } ], "notes": [ { "category": "description", "text": "The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks", "title": "Vulnerability summary" }, { "category": "other", "text": "Support for HTTP/2 protocol was added to haproxy in version 1.8, therefore previous versions are not affected by this flaw.\n\nThe version of haproxy shipped in OpenShift Container Platform 4 contains the vulnerable code, however exploitation requires setting ROUTER_USE_HTTP2 in the OpenShift Ingress Operator, which is not currently possible. The impact of this vulnerability is therefore reduced in OpenShift Container Platform 4 to Low.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.src", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19330" }, { "category": "external", "summary": "RHBZ#1777584", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1777584" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19330", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19330" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19330", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19330" } ], "release_date": "2019-11-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-04-28T15:37:42+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.src", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:1725" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.src", "AppStream-8.2.0.GA:haproxy-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debuginfo-0:1.8.23-3.el8.x86_64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.aarch64", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.ppc64le", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.s390x", "AppStream-8.2.0.GA:haproxy-debugsource-0:1.8.23-3.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks" } ] }
wid-sec-w-2024-0054
Vulnerability from csaf_certbund
Published
2024-01-09 23:00
Modified
2024-01-09 23:00
Summary
IBM Security Verify Access: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IBM Security Verify Access, ehemals IBM Security Access Manager (ISAM), ist eine Zugriffsverwaltungslösung.
Angriff
Ein Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuführen.
Betroffene Betriebssysteme
- Sonstiges
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "IBM Security Verify Access, ehemals IBM Security Access Manager (ISAM), ist eine Zugriffsverwaltungsl\u00f6sung.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-0054 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0054.json" }, { "category": "self", "summary": "WID-SEC-2024-0054 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0054" }, { "category": "external", "summary": "IBM Security Bulletin 7106586 vom 2024-01-09", "url": "https://www.ibm.com/support/pages/node/7106586" }, { "category": "external", "summary": "IBM Security Bulletin 7106583 vom 2024-01-09", "url": "https://www.ibm.com/support/pages/node/7106583" } ], "source_lang": "en-US", "title": "IBM Security Verify Access: Mehrere Schwachstellen", "tracking": { "current_release_date": "2024-01-09T23:00:00.000+00:00", "generator": { "date": "2024-02-15T17:56:02.171+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2024-0054", "initial_release_date": "2024-01-09T23:00:00.000+00:00", "revision_history": [ { "date": "2024-01-09T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "IBM Security Verify Access \u003c 10.0.7-ISS-ISVA-FP0000", "product": { "name": "IBM Security Verify Access \u003c 10.0.7-ISS-ISVA-FP0000", "product_id": "T031968", "product_identification_helper": { "cpe": "cpe:/a:ibm:security_verify_access:10.0.7-iss-isva-fp0000" } } } ], "category": "vendor", "name": "IBM" } ] }, "vulnerabilities": [ { "cve": "CVE-2032-43016", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2032-43016" }, { "cve": "CVE-2023-43017", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-43017" }, { "cve": "CVE-2023-40225", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-40225" }, { "cve": "CVE-2023-39417", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-39417" }, { "cve": "CVE-2023-38369", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-38369" }, { "cve": "CVE-2023-38267", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-38267" }, { "cve": "CVE-2023-32697", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-32697" }, { "cve": "CVE-2023-32330", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-32330" }, { "cve": "CVE-2023-32329", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-32329" }, { "cve": "CVE-2023-32328", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-32328" }, { "cve": "CVE-2023-32327", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-32327" }, { "cve": "CVE-2023-31006", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-31006" }, { "cve": "CVE-2023-31005", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-31005" }, { "cve": "CVE-2023-31004", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-31004" }, { "cve": "CVE-2023-31003", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-31003" }, { "cve": "CVE-2023-31002", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-31002" }, { "cve": "CVE-2023-31001", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-31001" }, { "cve": "CVE-2023-30999", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-30999" }, { "cve": "CVE-2023-25725", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-25725" }, { "cve": "CVE-2023-24998", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-24998" }, { "cve": "CVE-2023-2455", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-2455" }, { "cve": "CVE-2023-2454", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-2454" }, { "cve": "CVE-2023-1370", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2023-1370" }, { "cve": "CVE-2022-45688", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2022-45688" }, { "cve": "CVE-2022-41862", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2022-41862" }, { "cve": "CVE-2022-2625", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2022-2625" }, { "cve": "CVE-2022-2068", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2022-2068" }, { "cve": "CVE-2022-1471", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2022-1471" }, { "cve": "CVE-2020-11100", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2020-11100" }, { "cve": "CVE-2019-19330", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2019-19330" }, { "cve": "CVE-2019-18277", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2019-18277" }, { "cve": "CVE-2019-18276", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2019-18276" }, { "cve": "CVE-2019-14241", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2019-14241" }, { "cve": "CVE-2017-18342", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2017-18342" }, { "cve": "CVE-2015-5237", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in IBM Security Verify Access. Diese Fehler bestehen in mehreren Komponenten wie Access Manager Container und Drittanbieter-Modulen wie PostgreSQL oder HAProxy. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache-Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuf\u00fchren. Einige der Schwachstellen erfordern eine Interaktion des Benutzers, um sie erfolgreich auszunutzen." } ], "release_date": "2024-01-09T23:00:00Z", "title": "CVE-2015-5237" } ] }
gsd-2019-19330
Vulnerability from gsd
Modified
2023-12-13 01:23
Details
The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2019-19330", "description": "The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.", "id": "GSD-2019-19330", "references": [ "https://www.suse.com/security/cve/CVE-2019-19330.html", "https://www.debian.org/security/2019/dsa-4577", "https://access.redhat.com/errata/RHSA-2020:2265", "https://access.redhat.com/errata/RHSA-2020:1936", "https://access.redhat.com/errata/RHSA-2020:1725", "https://access.redhat.com/errata/RHSA-2020:1287", "https://ubuntu.com/security/CVE-2019-19330", "https://linux.oracle.com/cve/CVE-2019-19330.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2019-19330" ], "details": "The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.", "id": "GSD-2019-19330", "modified": "2023-12-13T01:23:54.227718Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-19330", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344", "refsource": "MISC", "url": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344" }, { "name": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878", "refsource": "MISC", "url": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878" }, { "name": "https://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e", "refsource": "MISC", "url": "https://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e" }, { "name": "https://tools.ietf.org/html/rfc7540#section-10.3", "refsource": "MISC", "url": "https://tools.ietf.org/html/rfc7540#section-10.3" }, { "name": "DSA-4577", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2019/dsa-4577" }, { "name": "20191128 [SECURITY] [DSA 4577-1] haproxy security update", "refsource": "BUGTRAQ", "url": "https://seclists.org/bugtraq/2019/Nov/45" }, { "name": "USN-4212-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4212-1/" }, { "name": "GLSA-202004-01", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/202004-01" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "2.0.10", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-19330" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-74" } ] } ] }, "references": { "reference_data": [ { "name": "https://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e", "refsource": "MISC", "tags": [ "Patch" ], "url": "https://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e" }, { "name": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878", "refsource": "MISC", "tags": [ "Patch" ], "url": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878" }, { "name": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344", "refsource": "MISC", "tags": [ "Patch" ], "url": "https://git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344" }, { "name": "https://tools.ietf.org/html/rfc7540#section-10.3", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "https://tools.ietf.org/html/rfc7540#section-10.3" }, { "name": "DSA-4577", "refsource": "DEBIAN", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2019/dsa-4577" }, { "name": "20191128 [SECURITY] [DSA 4577-1] haproxy security update", "refsource": "BUGTRAQ", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://seclists.org/bugtraq/2019/Nov/45" }, { "name": "USN-4212-1", "refsource": "UBUNTU", "tags": [ "Third Party Advisory" ], "url": "https://usn.ubuntu.com/4212-1/" }, { "name": "GLSA-202004-01", "refsource": "GENTOO", "tags": [], "url": "https://security.gentoo.org/glsa/202004-01" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9 } }, "lastModifiedDate": "2020-08-18T15:05Z", "publishedDate": "2019-11-27T16:15Z" } } }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.