Skip to content
OpenAdvisories

Package · Wolfi

haproxy-3.3

4 known vulnerabilities.

4 results · Feed

  • High 7.5

    HAProxy - NULL Pointer Dereference in hpack_dht_insert Function

    HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_defrag() when the memory pool is exhausted. An attacker can tri…

  • High 7.5

    HAProxy - Integer Overflow in FCGI Demux Record Length Field

    HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field…

  • Medium 6.5

    An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue …

  • Unscored —

    HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network.