PT-2023-20381 · Haproxy+1 · Haproxy+1

Yuki Mogi · Published 2023-01-26 · Updated 2025-02-11 · CVE-2023-25950

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions HAProxy versions 2.6.1 through 2.6.7 HAProxy version 2.7.0

Description The issue allows a remote attacker to alter a legitimate user's request, potentially obtaining sensitive information or causing a denial-of-service (DoS) condition.

Recommendations For HAProxy version 2.7.0, update to a version that includes a fix for this issue. For HAProxy versions 2.6.1 through 2.6.7, update to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

ALT-PU-2023-1134

ALT-PU-2023-1942

ALT-PU-2023-5064

ALT-PU-2023-5100

BIT-HAPROXY-2023-25950

CVE-2023-25950

OESA-2023-1257

ROSA-SA-2024-2400

Affected Products

Alt Linux

Haproxy

References · 43

• 🔥 https://github.com/knqyf263/CVE-2021-40346 · Exploit
• 🔥 https://github.com/donky16/CVE-2021-40346-POC · Exploit
• 🔥 https://github.com/dhmosfunk/HTTP3ONSTEROIDS · Exploit
• 🔥 https://github.com/alikarimi999/CVE-2021-40346 · Exploit
• 🔥 https://github.com/Vulnmachines/HAProxy_CVE-2021-40346 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40225 · Security Note
• https://errata.altlinux.org/ALT-PU-2023-1942 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11100 · Security Note
• https://bdu.fstec.ru/vul/2023-00287 · Security Note
• https://errata.altlinux.org/ALT-PU-2023-5100 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0836 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25950 · Security Note
• https://bdu.fstec.ru/vul/2023-00758 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-25725 · Security Note
• https://osv.dev/vulnerability/CVE-2023-25950 · Vendor Advisory