HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
Vulnerabilidades de haproxy haproxy enterprise (CVE)
Registros CVE publicados para haproxy haproxy enterprise, los más recientes primero. Siga el producto para recibir un correo con cada nueva.
4.8Media
HAProxy HAProxy
3.7Baja
HAProxy HAProxy
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.
7.5Alta
Denial of service vulnerability in HAProxy mjson library
HAProxy Technologies HAProxy Community Edition
Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.