| Package | Affected versions | Patched versions |
|---|---|---|
| haproxy | ≥ 1.9.2, < 1.9.7 | 1.9.7 |
HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/ssl_sock.h error.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free