haproxy vulnerabilities (Red Hat)
169 vulnerabilities.
haproxyRed HatAn uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash...6.5 MediumhaproxyRed HatOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...7.4 HighhaproxyRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumhaproxyRed HatSpring Security authorization rules can be bypassed via forward or include dispatcher types9.8 CriticalhaproxyRed Hatspring-security-oauth2-client vulnerable to Privilege Escalation8.1 HighhaproxyRed HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 MediumhaproxyRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 CriticalhaproxyRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighhaproxyRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighhaproxyRed HatUnbounded memory consumption when reading headers in archive/tar7.5 HighhaproxyRed HatCRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure7.1 HighhaproxyRed HatBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighhaproxyRed HatFailure to strip relative path components in net/url7.5 HighhaproxyRed Hatgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighhaproxyRed Hatpython-scciclient vulnerable to Man-in-the-middle (MITM) attacks7.4 HighhaproxyRed HatPanic when decoding Float and Rat types in math/big7.5 HighhaproxyRed HatExposure of client IP addresses in net/http6.5 MediumhaproxyRed HatStack exhaustion when reading certain archives in compress/gzip7.5 HighhaproxyRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumhaproxyRed HatIncorrect Default Permissions in runc5.9 MediumhaproxyRed HatIgnition config accessible to unprivileged software on VMware6.5 MediumhaproxyRed HatThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 HighhaproxyRed Hatencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 HighhaproxyRed HatThe release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch...7.5 HighhaproxyRed Hatgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighhaproxyRed Hatregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 HighhaproxyRed HatA flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header....7.5 HighhaproxyRed HatPassword parameter default values exposed by Jenkins Pipeline: Build Step Plugin6.5 MediumhaproxyRed HatJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 HighhaproxyRed HatJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 HighhaproxyRed HatJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 HighhaproxyRed HatJenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials4.3 MediumhaproxyRed HatImproper Limitation of a Pathname to a Restricted Directory in Jenkins Pipeline: Shared Groovy Libraries Plugin6.5 MediumhaproxyRed HatImproper Link Resolution Before File Access in Jenkins Pipeline: Shared Groovy Libraries Plugin6.5 MediumhaproxyRed HatImproper Link Resolution Before File Access in Jenkins Pipeline: Groovy Plugin6.5 MediumhaproxyRed HatImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Shared Groovy Libraries Plugin8.8 HighhaproxyRed HatImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin8.8 HighhaproxyRed HatLink Following in Jenkins Pipeline Multibranch Plugin6.5 MediumhaproxyRed HatJenkins Pipeline: Multibranch Plugin vulnerable to OS Command Injection8.8 HighhaproxyRed HatUncontrolled Resource Consumption in promhttp7.5 HighhaproxyRed Hatcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 HighhaproxyRed HatRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 HighhaproxyRed HatCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 CriticalhaproxyRed Hatx/crypto/ssh vulnerable to panic via malformed packets7.5 HighhaproxyRed Hatgolang.org/x/text/language Out-of-bounds Read vulnerability7.5 HighhaproxyRed HatAn integer overflow exists in HAProxy 2.0 through 2.5 in the htx_add_header() can be exploited to...7.5 HighhaproxyRed HatHoles in EndpointSlice Validation Enable Host Network Hijack2.7 LowhaproxyRed HatAn issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It...7.5 HighhaproxyRed HatAn issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2...5.3 MediumhaproxyRed HatAn issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It...7.5 High- Show moreLoading…