BIT-haproxy-2021-39242: High severity HAProxy HAProxy vulnerability

Q: Which HAProxy releases are affected?

Affected releases are HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3.

Q: What must an attacker be able to do to exploit this issue?

An attacker needs to be able to send an HTTP request with an attacker-controlled Host header. The issue arises when HAProxy mishandles a mismatch between the Host header and authority.

Q: Does exploitation require authentication or user interaction?

No. The supplied severity vector indicates network reachability, low attack complexity, no privileges required, and no user interaction.

Published Aug 17, 2021

Updated

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situation with an attacker-controlled HTTP Host header, because a mismatch between Host and authority is mishandled.

Affected Software

1 affected component

HAProxy HAProxy>=2.2<2.2.16, >=2.3<2.3.13, >=2.4<2.4.3

Event History

Aug 17, 2021

CVE Published

via OSV·07:15 PM

Data Sourced

via OSV·07:15 PM

DescriptionSeverity

Frequently Asked Questions

Which HAProxy releases are affected?

Affected releases are HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3.

What must an attacker be able to do to exploit this issue?

An attacker needs to be able to send an HTTP request with an attacker-controlled Host header. The issue arises when HAProxy mishandles a mismatch between the Host header and authority.

Does exploitation require authentication or user interaction?

No. The supplied severity vector indicates network reachability, low attack complexity, no privileges required, and no user interaction.

BIT-haproxy-2021-39242: High severity HAProxy HAProxy vulnerability

Affected Software

Event History

Frequently Asked Questions

Which HAProxy releases are affected?

What must an attacker be able to do to exploit this issue?

Does exploitation require authentication or user interaction?

Company

Resources

Contact

Frequently Asked Questions

Which HAProxy releases are affected?

What must an attacker be able to do to exploit this issue?

Does exploitation require authentication or user interaction?