CVE ID:	CVE-2021-40346
Description:	An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http- request HAProxy ACLs and possibly other ACLs.
Test IDs:	1.3.6.1.4.1.25623.1.0.854197   1.3.6.1.4.1.25623.1.0.854151   1.3.6.1.4.1.25623.1.0.704968   1.3.6.1.4.1.25623.1.1.2.2022.1205   1.3.6.1.4.1.25623.1.0.818431   1.3.6.1.4.1.25623.1.1.2.2021.2916   1.3.6.1.4.1.25623.1.1.2.2021.2924   1.3.6.1.4.1.25623.1.1.2.2022.1224   1.3.6.1.4.1.25623.1.0.818462   1.3.6.1.4.1.25623.1.0.845044
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2021-40346 Debian Security Information: DSA-4968 (Google Search) https://www.debian.org/security/2021/dsa-4968 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A7V2IYO22LWVBGUNZWVKNTMDV4KINLFO/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MXTSBY2TEAXWZVFQM3CXHJFRONX7PEMN/ https://git.haproxy.org/?p=haproxy.git https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95 https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/ https://www.mail-archive.com/haproxy@formilux.org https://www.mail-archive.com/haproxy@formilux.org/msg41114.html https://lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120@%3Cdev.cloudstack.apache.org%3E https://lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a@%3Cdev.cloudstack.apache.org%3E