Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 526
Alerts This Week
Warning Icon 1 526

Ubuntu 18.04 LTS: USN-7067-1 critical: HAProxy denial of service

ubuntu
Calendar Grey October 14, 2024
Scroller Ubuntu
HAProxy has released a patch addressing a critical security flaw in Ubuntu 18.04 LTS; the vulnerability arises from maliciously formatted packets.
HAProxy could be made to crash or run programs if it received specially crafted network traffic.

Summary

HAProxy could be made to crash or run programs if it received

specially crafted network traffic.

Software Description:

- haproxy: fast and reliable load balancing reverse proxy

Details:

It was discovered that HAProxy did not properly limit the creation of new

HTTP/2 streams. A remote attacker could possibly use this issue to cause

HAProxy to consume excessive resources, leading to a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu network traffic HAProxy

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
   haproxy                         1.8.8-1ubuntu0.13+esm3
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7067-1

  CVE-2023-44487

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7067-1

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu network traffic HAProxy

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.