UBUNTU-CVE-2021-40346

An integer overflow exists in HAProxy 2.0 through 2.5 in htxaddheader that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.

References

Affected packages

Ubuntu:20.04:LTS / haproxy

Package

Name: haproxy
Purl: pkg:deb/ubuntu/haproxy@2.0.13-2ubuntu0.3?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.13-2ubuntu0.3

Affected versions

2.*

2.0.5-1

2.0.8-1

2.0.9-1

2.0.10-1

2.0.10-1ubuntu1

2.0.11-1ubuntu1

2.0.12-1ubuntu2

2.0.13-1ubuntu2

2.0.13-2

2.0.13-2ubuntu0.1

2.0.13-2ubuntu0.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "haproxy",
            "binary_version": "2.0.13-2ubuntu0.3"
        },
        {
            "binary_name": "vim-haproxy",
            "binary_version": "2.0.13-2ubuntu0.3"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-40346.json"

Ubuntu:22.04:LTS / haproxy

Package

Name: haproxy
Purl: pkg:deb/ubuntu/haproxy@2.2.9-2ubuntu2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.9-2ubuntu2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "haproxy",
            "binary_version": "2.2.9-2ubuntu2"
        },
        {
            "binary_name": "vim-haproxy",
            "binary_version": "2.2.9-2ubuntu2"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-40346.json"