Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2023-0836
Description:An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to configured FastCGI backends in an unexpected way.
Test IDs: 1.3.6.1.4.1.25623.1.1.1.1.2023.5388   1.3.6.1.4.1.25623.1.1.2.2023.2687   1.3.6.1.4.1.25623.1.1.2.2023.2645   1.3.6.1.4.1.25623.1.1.12.2023.5994.1  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2023-0836
Debian Security Information: DSA-5388 (Google Search)
https://www.debian.org/security/2023/dsa-5388
https://git.haproxy.org/?p=haproxy.git;a=commitdiff;h=2e6bf0a
https://git.haproxy.org/?p=haproxy.git;a=commitdiff;h=2e6bf0a




© 1998-2025 E-Soft Inc. All rights reserved.