Vulnerability · Published Apr 11, 2023 · Assigned by jpcert
CVE-2023-25950
High 7.3
In plain English
A high-severity security flaw in HAProxy from HAProxy Technologies. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.0% (higher than 87% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | haproxy | 2.6.8-1 | DEBIAN-CVE-2023-25950 |
| Debian:13 | haproxy | 2.6.8-1 | DEBIAN-CVE-2023-25950 |
| Debian:14 | haproxy | 2.6.8-1 | DEBIAN-CVE-2023-25950 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HAProxy Technologies | HAProxy | version 2.7.0, and version 2.6.1 to 2.6.7 |
Weakness: CWE-444 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L