Log in Start free

Vulnerability · Published Mar 29, 2023 · Assigned by redhat

CVE-2023-0836

High 7.5

In plain English

A high-severity information exposure in HAProxy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.2%top 31.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to configured FastCGI backends in an unexpected way.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9haproxy2.4.22-1.el9ALSA-2023:6496
Debian:12haproxy2.6.8-1DEBIAN-CVE-2023-0836
Debian:13haproxy2.6.8-1DEBIAN-CVE-2023-0836
Debian:14haproxy2.6.8-1DEBIAN-CVE-2023-0836
Ubuntu:22.04:LTShaproxy2.4.18-0ubuntu1.3USN-5994-1
Ubuntu:22.04:LTShaproxy2.4.18-0ubuntu1.3UBUNTU-CVE-2023-0836

Affected products (as reported)

VendorProductVersions
n/a HAProxy HAProxy 2.8, HAProxy 2.7.1, HAProxy 2.6.8, HAProxy 2.5.11, HAProxy 2.4.21, HAProxy 2.2.27

Weakness: CWE-200, CWE-459 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References