Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Debian 9: DLA-3034-1 Critical: HAProxy HTTP Smuggling and DoS

debian lts
Calendar Grey May 30, 2022
Dist Debian Esm H88
The Debian LTS Advisory DLA-3035-2 relates to vulnerabilities found in the OpenSSL library, improving its resilience to threats.
Nathan Davison discovered that HAProxy, a load balancing reverse proxy, did not correctly reject requests or responses featuring a transfer-encoding header missing the "chunked" va...
Topics%20covered

Topics Covered

security advisory security issue debian doS haproxy http request smuggling

Summary

We recommend that you upgrade your haproxy packages.

For the detailed security status of haproxy please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/haproxy

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

-------------------------------------------------------------------------Package: haproxy
Version: 1.7.5-2+deb9u1
CVE ID: CVE-2018-20102 CVE-2018-20103 CVE-2019-18277
Debian Bug: 916308 916307

Topics%20covered

Topics Covered

security advisory security issue debian doS haproxy http request smuggling

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here