Lucene search
Veracode Vulnerability DatabaseVERACODE:25185HistoryMay 06, 2020 - 3:21 a.m.
CRLF Injection
2020-05-0603:21:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.022 Low
EPSS
Percentile
89.4%
haproxy is vulnerable to CRLF injection. The HTTP/2 implementation is vulnerable to intermediary encapsulation attacks due to lack of validation for CRLF characters, zero and null characters in headers,
References
access.redhat.com/errata/RHSA-2020:1936
access.redhat.com/security/updates/classification/#moderate
git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e
git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878
git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344
seclists.org/bugtraq/2019/Nov/45
security.gentoo.org/glsa/202004-01
tools.ietf.org/html/rfc7540#section-10.3
usn.ubuntu.com/4212-1/
www.debian.org/security/2019/dsa-4577
Related
openvas
openvas
Ubuntu: Security Advisory (USN-4212-1)
2019-12-05 00:00:00
Debian: Security Advisory (DSA-4577-1)
2019-11-29 00:00:00
Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2020-1904)
2020-08-31 00:00:00
ibm
ibm
osv
osv
haproxy - security update
2019-11-28 00:00:00
CVE-2019-19330
2019-11-27 16:15:11
nvd
nvd
CVE-2019-19330
2019-11-27 16:15:11
ubuntu
ubuntu
HAProxy vulnerability
2019-12-04 00:00:00
ubuntucve
ubuntucve
CVE-2019-19330
2019-11-27 00:00:00
cve
cve
CVE-2019-19330
2019-11-27 16:15:11
redhatcve
redhatcve
CVE-2019-19330
2019-11-27 21:48:17
alpinelinux
alpinelinux
CVE-2019-19330
2019-11-27 16:15:11
debian
debian
[SECURITY] [DSA 4577-1] haproxy security update
2019-11-28 08:20:22
[SECURITY] [DSA 4577-1] haproxy security update
2019-11-28 08:20:22
checkpoint_advisories
checkpoint_advisories
HAProxy HTTP2 CRLF Injection (CVE-2019-19330)
2020-08-02 00:00:00
nessus
nessus
Photon OS 1.0: Haproxy PHSA-2019-1.0-0263
2020-01-16 00:00:00
Debian DSA-4577-1 : haproxy - security update
2019-12-03 00:00:00
Ubuntu 18.04 LTS : HAProxy vulnerability (USN-4212-1)
2019-12-05 00:00:00
debiancve
debiancve
CVE-2019-19330
2019-11-27 16:15:11
symantec
symantec
HAProxy CVE-2019-19330 CRLF Injection Vulnerability
2019-11-27 00:00:00
gentoo
gentoo
HAProxy: Remote execution of arbitrary code
2020-04-01 00:00:00
prion
prion
Design/Logic Flaw
2019-11-27 16:15:00
cvelist
cvelist
CVE-2019-19330
2019-11-27 15:53:26
redhat
redhat
photon
photon
Critical Photon OS Security Update - PHSA-2019-0195
2019-12-09 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-1.0-0263
2019-12-27 00:00:00
Critical Photon OS Security Update - PHSA-2019-0263
2019-12-27 00:00:00
oraclelinux
oraclelinux
haproxy security, bug fix, and enhancement update
2020-05-05 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1851
2021-07-02 17:04:24