BIT-haproxy-2023-0056

BIT-haproxy-2023-0056 PUBLISHED CVSS 6.5 MEDIUM

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Bitnami	haproxy

Timeline

Jan 31, 2024 CVE Published
Jan 31, 2024 CVE Updated

References

https://access.redhat.com/security/cve/CVE-2023-0056 url

Open in Interactive Console →