Lucene search

K
fedoraFedoraFEDORA:0861E3053090
HistoryFeb 25, 2023 - 4:02 a.m.

[SECURITY] Fedora 36 Update: haproxy-2.4.22-2.fc36

2023-02-2504:02:52
lists.fedoraproject.org
22
haproxy
tcp
http
reverse proxy
high availability
load balancing
server persistence
http cookies
server monitoring
http headers
security patterns

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

0.003 Low

EPSS

Percentile

68.3%

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to backup servers in the event a main one fails - accept connections to special ports dedicated to service monitoring - stop accepting connections without breaking existing ones - add, modify, and delete HTTP headers in both directions - block requests matching particular patterns - report detailed status to authenticated users from a URI intercepted from the application

OSVersionArchitecturePackageVersionFilename
Fedora36anyhaproxy< 2.4.22UNKNOWN

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

0.003 Low

EPSS

Percentile

68.3%