| Package | Affected versions | Patched versions |
|---|---|---|
| haproxy | = 2.5≥ 2.0.0, < 2.0.25≥ 2.2.0, < 2.2.17≥ 2.3.0, < 2.3.14≥ 2.4.0, < 2.4.4 | 2.0.252.2.172.3.142.4.4 |
An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free