All products

Red Hat OpenShift Container Platform 3.11/haproxy

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 Stream Cancellation AttackCVE-2023-44487 · GHSA-QPPJ-FM5R-HXR3 golang.org/x/netcom.typesafe.akka:akka-http-core GoMavenRed HatSwift Medium Fix reported
SSL/TLS: CBC padding timing attack (lucky-13)CVE-2013-0169 Red Hat Enterprise Linux 5/openssl097aRed Hat Enterprise Linux 6/openssl098e Red Hat Medium No fix reported
haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandledCVE-2021-39242 Red Hat OpenShift Container Platform 3.11/haproxy Red Hat Medium No fix reported
haproxy: an HTTP method name may contain a space followed by the name of a protected resourceCVE-2021-39241 Red Hat OpenShift Container Platform 3.11/haproxy Red Hat Medium No fix reported
haproxy: does not ensure that the scheme and path portions of a URI have the expected charactersCVE-2021-39240 Red Hat OpenShift Container Platform 3.11/haproxy Red Hat Medium No fix reported
haproxy: request smuggling attack or response splitting via duplicate content-length headerCVE-2021-40346 Red Hat OpenShift Container Platform 3.11/haproxy Red Hat Medium No fix reported
haproxy: data leak via fcgi requestsCVE-2023-0836 Red Hat Ceph Storage 5/haproxyRed Hat Enterprise Linux 7/haproxy Red Hat Medium No fix reported
haproxy: segfault DoSCVE-2023-0056 Red Hat Enterprise Linux 7/haproxyRed Hat OpenShift Container Platform 3.11/haproxy Red Hat Medium No fix reported
haproxy: request smuggling attack in HTTP/1 header parsingCVE-2023-25725 Red Hat OpenShift Container Platform 3.11/haproxy Red Hat High No fix reported
haproxy: malformed HTTP header field name can lead to HTTP request/response smugglingCVE-2023-25950 Red Hat Enterprise Linux 7/haproxyRed Hat Enterprise Linux 9/haproxy Red Hat Medium No fix reported
haproxy: Proxy forwards malformed empty Content-Length headersCVE-2023-40225 Red Hat Ceph Storage 5/haproxyRed Hat Enterprise Linux 6/haproxy Red Hat Medium No fix reported