Summary
Falco Schmutz discovered that HAProxy incorrectly handled the reqdeny
filter. A remote attacker could use this issue to cause HAProxy to crash,
resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | haproxy | 1.6.3-1ubuntu0.1 |
Vulnerabilities 1
-
Unscored —CVE-2016-5360 EPSS 43%
HAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, allows remote attackers to cause a denial of service…
References
-
report
https://ubuntu.com/security/CVE-2016-5360