USN-7133-1 — haproxy vulnerability

Summary

Yuki Mogi discovered that HAProxy incorrectly handled the interpretation
of certain HTTP requests. A remote attacker could possibly use this issue
to perform a request smuggling attack and obtain sensitive information.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 24.04 LTS 24.04:LTS	haproxy	2.8.5-1ubuntu3.2

Vulnerabilities 1

Medium 5.3

CVE-2024-53008

Inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in HAProxy. If this vulne…

HAProxy HAProxy 2.8 HAProxy 3.0 HAProxy 2.6 Debian Ubuntu

Nov 28, 2024

References

report
https://ubuntu.com/security/CVE-2024-53008

haproxy vulnerability

Summary

Fixed packages 1

Vulnerabilities 1

Inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in HAProxy. If this vulne…

References