USN-4174-1: HAproxy vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2019-18277
• https://launchpad.net/ubuntu/+source/haproxy/2.0.5-1ubuntu0.2
• https://launchpad.net/ubuntu/+source/haproxy/1.8.19-1ubuntu1.2
• https://launchpad.net/ubuntu/+source/haproxy/1.8.8-1ubuntu0.7
• https://launchpad.net/ubuntu/+source/haproxy/1.6.3-1ubuntu0.3
• https://ubuntu.com/security/notices/USN-4174-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2019-18277

Frequently Asked Questions

• What is the vulnerability ID of this HAproxy vulnerability?

  The vulnerability ID of this HAproxy vulnerability is USN-4174-1.

• What is the impact of this vulnerability?

  This vulnerability allows an attacker to perform a privilege escalation through Request Smuggling.

• Which versions of HAproxy are affected?

  HAproxy versions 2.0.5-1ubuntu0.2, 1.8.19-1ubuntu1.2, 1.8.8-1ubuntu0.7, and 1.6.3-1ubuntu0.3 are affected.

• How can I fix this vulnerability?

  To fix this vulnerability, you can update HAproxy to version 2.0.5-1ubuntu0.2, 1.8.19-1ubuntu1.2, 1.8.8-1ubuntu0.7, or 1.6.3-1ubuntu0.3.

• Where can I find more information about this vulnerability?

  You can find more information about this vulnerability on the Ubuntu security advisory page: [CVE-2019-18277](https://ubuntu.com/security/CVE-2019-18277).