USN-6530-1: HAProxy vulnerability
It was discovered that HAProxy incorrectly handled URI components containing the hash character (#). A remote attacker could possibly use this issue to obtain sensitive information, or to bypass certain pathend rules.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the HAProxy vulnerability?
The vulnerability ID for the HAProxy vulnerability is USN-6530-1.
What is the impact of the HAProxy vulnerability?
The HAProxy vulnerability can allow a remote attacker to obtain sensitive information or bypass certain rules.
Which versions of HAProxy are affected by the vulnerability?
The versions of HAProxy affected by the vulnerability are 2.6.9-1ubuntu1.2, 2.4.22-0ubuntu0.22.04.3, and 2.0.31-0ubuntu0.3.
What is the recommended remedy for the HAProxy vulnerability?
The recommended remedy for the HAProxy vulnerability is to update to version 2.6.9-1ubuntu1.2 (for Ubuntu 23.04), version 2.4.22-0ubuntu0.22.04.3 (for Ubuntu 22.04), or version 2.0.31-0ubuntu0.3 (for Ubuntu 20.04).
Where can I find more information about the HAProxy vulnerability?
More information about the HAProxy vulnerability can be found at the following references: [CVE-2023-45539](https://ubuntu.com/security/CVE-2023-45539), [Ubuntu Security Notice](https://launchpad.net/ubuntu/+source/haproxy/2.6.9-1ubuntu1.2), [Ubuntu Launchpad](https://launchpad.net/ubuntu/+source/haproxy/2.4.22-0ubuntu0.22.04.3).