Red Hat Security AdvisoryRHSA-2021:5208
OpenShift Container Platform 4.8.25 security update
Released 2022-01-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.8 haproxy-2.2.13-2.el7, haproxy-2.2.13-2.el8
Fixes 4 records
Priority HIGH 67
An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possi…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.58832 · Published 2021-09-08 · Partial fix CWE-190
Priority LOW 37
An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02231 · Published 2021-08-17 · Partial fix CWE-755
Priority LOW 37
An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0221 · Published 2021-08-17 · Partial fix
Priority LOW 27
An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01687 · Published 2021-08-17 · Partial fix
