CVE-2021-40346

CVE-2021-40346

Published · Updated

Follow this CVE+ Monitor haproxy

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 59%
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
1 product (2 components)
Red Hat OpenShift Container Platform 3.11
workaround: To mitigate this problem the following can be added to proxy config: http-request deny if { req.hdr_cnt(content-length) gt 1 } http-response deny if { res.hdr_cnt(content-length) gt 1 }
Fixed
4 products (37 components)
Red Hat OpenShift Container Platform 4.6 · Red Hat OpenShift Container Platform 4.7 · Red Hat OpenShift Container Platform 4.8 · Red Hat OpenShift Container Platform 4.9
fix ↗
Not affected
9 products (121 components) — because the vulnerable code is not present in the product
Red Hat OpenShift Container Platform 4.7 · Red Hat OpenShift Container Platform 4.9 · Red Hat OpenShift Container Platform 4.8 · Red Hat OpenShift Container Platform 4.6 · Red Hat Software Collections · and others 4
An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.
Affected products
n/a · n/a