Known vulnerabilities in haproxy (Red Hat package) - page 6

Vendor: Red Hat Inc.
Software: haproxy (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:haproxy_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 117
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting haproxy (Red Hat package) haproxy (Red Hat package) is affected by 117 known vulnerabilities: 6 high, 75 medium, 36 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56245 - Improper input validation
CVE-2021-25735		 CWE-20 Medium
Available
No
 2.2.13-1.el7, 2.2.13-1.el8 01.09.2021 SB2021090125
SB2021090126
SB2022083132
and 4 more
#VU56244 - Resource exhaustion
CVE-2021-21419		 CWE-400 Medium
No
No
 2.2.13-1.el7, 2.2.13-1.el8 01.09.2021 SB2021090124
SB2021090126
SB2021121340
and 9 more
#VU56243 - Improper Authentication
CVE-2021-3636		 CWE-287 Low
No
No
 2.2.13-1.el7, 2.2.13-1.el8 01.09.2021 SB2021090123
SB2021090126
SB2022083132
and 1 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428		 CWE-613 Low
No
No
 2.2.15-1.el8 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU55006 - Use After Free
CVE-2021-36980		 CWE-416 High
No
No
 2.2.15-1.el8 20.07.2021 SB2021072016
SB2021072017
SB2021102110
and 15 more
#VU54521 - Resource exhaustion
CVE-2021-33196		 CWE-400 Medium
No
No
 2.2.15-1.el8 04.07.2021 SB2021070405
SB2021070406
SB2021071515
and 37 more
#VU53973 - Improper input validation
CVE-2021-28169		 CWE-20 Medium
No
No
 2.2.15-1.el8 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU53436 - Exposure of sensitive information to an unauthorized actor
CVE-2021-25737		 CWE-200 Low
No
No
 2.2.13-1.el7, 2.2.13-1.el8 24.05.2021 SB2021052409
SB2021060911
SB2021090126
and 4 more
#VU53152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21648		 CWE-79 Low
No
No
 2.2.13-1.el7, 2.2.13-1.el8 12.05.2021 SB2021051209
SB2021090126
SB2022083132
and 1 more
#VU52902 - Improper Validation of Array Index
CVE-2021-3121		 CWE-129 High
No
No
 2.2.13-1.el7, 2.2.13-1.el8 06.05.2021 SB2021011120
SB2021050602
SB2021050603
and 34 more
#VU51994 - Improper Authentication
CVE-2021-21640		 CWE-287 Low
No
No
 2.2.13-1.el7, 2.2.13-1.el8 08.04.2021 SB2021040814
SB2021052527
SB2021062509
and 3 more
#VU51993 - Improper input validation
CVE-2021-21639		 CWE-20 Low
No
No
 2.2.13-1.el7, 2.2.13-1.el8 08.04.2021 SB2021040814
SB2021052527
SB2021062509
and 3 more
#VU51595 - Permissions, Privileges, and Access Controls
CVE-2021-21623		 CWE-264 Medium
No
No
 2.2.13-1.el7, 2.2.13-1.el8 22.03.2021 SB2021032207
SB2021090126
SB2022083132
and 1 more
#VU50047 - Incorrect Calculation
CVE-2021-3114		 CWE-682 Medium
No
No
 2.2.13-1.el7, 2.2.13-1.el8 26.01.2021 SB2021012714
SB2021012715
SB20210120130
and 40 more
#VU26549 - Heap-based Buffer Overflow
CVE-2020-11100		 CWE-122 High
No
No
 1.8.15-5.el8_0.1, 1.8.15-6.el8_1.1, 1.8.23-3.el7, 2.0.13-3.el7, 2.0.13-3.el8 02.04.2020 SB2020040219
SB2020040220
SB2020040221
and 13 more
#VU23084 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2019-19330		 CWE-93 Medium
No
No
 1.8.23-3.el7, 1.8.23-3.el8, 2.0.13-3.el7, 2.0.13-3.el8 28.11.2019 SB2019112812
SB2019112813
SB2019120422
and 7 more
#VU22597 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-18277		 CWE-444 Medium
No
No
 1.8.23-3.el7, 1.8.23-3.el8, 2.0.13-3.el7, 2.0.13-3.el8 07.11.2019 SB2019110721
SB2019110722
SB2019120408
and 6 more


Showing elements 101 - 120 out of 117