Red Hat Security AdvisoryRHSA-2022:0024
OpenShift Container Platform 4.6.53 security update
Released 2022-01-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.6 haproxy-2.0.16-2.el7, haproxy-2.0.16-4.el8, haproxy20-2.0.16-2.el7 +1
Fixes 2 records
Priority HIGH 67
An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possi…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.58832 · Published 2021-09-08 · Partial fix CWE-190
Priority LOW 27
An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01687 · Published 2021-08-17 · Partial fix
