PT-2022-6829 · Haproxy+7 · Haproxy+7

Published 2022-12-21 · Updated 2025-02-25 · CVE-2023-0056

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions HAProxy (affected versions not specified)

Description The issue is related to an uncontrolled resource consumption vulnerability. This could allow a remote attacker to cause a denial of service. The vulnerability may be exploited by an authenticated remote attacker running a specially crafted malicious server, potentially crashing the service and impacting availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2023:1696

BDU:2023-04835

BIT-HAPROXY-2023-0056

CVE-2023-0056

DSA-5348-1

OESA-2023-1141

OPENSUSE-SU-2023_0153-1

RHSA-2023:0727

RHSA-2023:1325

RHSA-2023:1696

RHSA-2023:1978

RHSA-2023_1696

SUSE-FU-2023:2117-1

SUSE-FU-2023:2119-1

SUSE-SU-2023:0153-1

SUSE-SU-2023:0412-1

SUSE-SU-2023:0413-1

SUSE-SU-2023_0153-1

SUSE-SU-2023_0412-1

SUSE-SU-2023_0413-1

USN-5819-1

Affected Products

Almalinux

Astra Linux

Haproxy

Linuxmint

Red Hat

Red Os

Suse

Ubuntu

References · 46

• https://ubuntu.com/security/notices/USN-5819-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-25725 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:0153-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-FU-2023:2117-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5819-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0413-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-0056 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0412-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04835 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-0056 · Security Note
• https://osv.dev/vulnerability/DSA-5348-1 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2023-0056 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:1696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0056 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0056 · Vendor Advisory