CVE-2023-25950

HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's reque...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami haproxy

[{"type":"SEMVER","events":[{"introduced":"2.6.1"},{"fixed":"2.6.8"},{"introduced":"2.7.0"},{"fixed":"2.7.1"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2023-25950 haproxy Corrigé dans: 2.6.8-1

Références

advisory jvn.jp
web git.haproxy.org
web haproxy.org
web nvd.nist.gov