![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2023-0836 |
Description: | An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to configured FastCGI backends in an unexpected way. |
Test IDs: | 1.3.6.1.4.1.25623.1.1.1.1.2023.5388 1.3.6.1.4.1.25623.1.1.2.2023.2687 1.3.6.1.4.1.25623.1.1.2.2023.2645 1.3.6.1.4.1.25623.1.1.12.2023.5994.1 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2023-0836 Debian Security Information: DSA-5388 (Google Search) https://www.debian.org/security/2023/dsa-5388 https://git.haproxy.org/?p=haproxy.git;a=commitdiff;h=2e6bf0a https://git.haproxy.org/?p=haproxy.git;a=commitdiff;h=2e6bf0a |