CVE-2023-25950

HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's reque...

Original description

The description as published by the source.

HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami haproxy

[{"type":"SEMVER","events":[{"introduced":"2.6.1"},{"fixed":"2.6.8"},{"introduced":"2.7.0"},{"fixed":"2.7.1"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2023-25950 haproxy Fixed in: 2.6.8-1

References

advisory jvn.jp
web git.haproxy.org
web haproxy.org
web nvd.nist.gov