Test ID:	1.3.6.1.4.1.25623.1.0.844262
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-4212-1)
Summary:	The remote host is missing an update for the 'haproxy' package(s) announced via the USN-4212-1 advisory.
Description:	Summary: The remote host is missing an update for the 'haproxy' package(s) announced via the USN-4212-1 advisory. Vulnerability Insight: Tim Dusterhus discovered that HAProxy incorrectly handled certain HTTP/2 headers. An attacker could possibly use this issue to execute arbitrary code through CRLF injection. Affected Software/OS: 'haproxy' package(s) on Ubuntu 18.04, Ubuntu 19.04, Ubuntu 19.10. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-19330 Bugtraq: 20191128 [SECURITY] [DSA 4577-1] haproxy security update (Google Search) https://seclists.org/bugtraq/2019/Nov/45 Debian Security Information: DSA-4577 (Google Search) https://www.debian.org/security/2019/dsa-4577 https://security.gentoo.org/glsa/202004-01 https://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878 https://git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344 https://tools.ietf.org/html/rfc7540#section-10.3 https://usn.ubuntu.com/4212-1/
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.