CVE-2018-11469

Publication date 25 May 2018

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 (if cache enabled) allows attackers to achieve information disclosure via an unauthenticated remote request, related to the proto_http.c check_request_for_cacheability function.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
haproxy	18.04 LTS bionic	Fixed 1.8.8-1ubuntu0.1
	17.10 artful	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release

Notes

leosilva

issue was introduced in 1.8.0. trusty, xenial and artful are not affected.

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
haproxy	Other: https://git.haproxy.org/?p=haproxy-1.8.git;a=commit;h=17514045e5d934dede62116216c1b016fe23dd06

Severity score breakdown

Parameter	Value
Base score	5.9 · Medium
Attack vector	Network
Attack complexity	High
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	None
Availability impact	None
Vector	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N