USN-7067-1: HAProxy vulnerability
14 October 2024
HAProxy could be made to crash or run programs if it received specially crafted network traffic.
Releases
Packages
- haproxy - fast and reliable load balancing reverse proxy
Details
It was discovered that HAProxy did not properly limit the creation of new
HTTP/2 streams. A remote attacker could possibly use this issue to cause
HAProxy to consume excessive resources, leading to a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04
-
haproxy
-
1.8.8-1ubuntu0.13+esm3
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-6427-1: dotnet-sdk-6.0, dotnet-host-7.0, netstandard-targeting-pack-2.1-7.0, dotnet-targeting-pack-6.0, dotnet-host, dotnet-sdk-6.0-source-built-artifacts, aspnetcore-targeting-pack-7.0, dotnet-runtime-6.0, dotnet6, aspnetcore-runtime-6.0, dotnet-apphost-pack-7.0, dotnet-templates-6.0, dotnet-targeting-pack-7.0, dotnet7, dotnet-runtime-7.0, dotnet-hostfxr-7.0, dotnet-sdk-7.0, aspnetcore-targeting-pack-6.0, dotnet-templates-7.0, dotnet-hostfxr-6.0, dotnet-apphost-pack-6.0, aspnetcore-runtime-7.0, netstandard-targeting-pack-2.1, dotnet-sdk-7.0-source-built-artifacts
- USN-6427-2: dotnet-runtime-8.0, netstandard-targeting-pack-2.1-8.0, dotnet-hostfxr-8.0, dotnet-apphost-pack-8.0, dotnet-targeting-pack-8.0, dotnet-sdk-8.0-source-built-artifacts, dotnet-host-8.0, dotnet-sdk-8.0, aspnetcore-targeting-pack-8.0, dotnet-templates-8.0, dotnet8, aspnetcore-runtime-8.0
- USN-6438-1: dotnet-sdk-6.0, dotnet-host-7.0, netstandard-targeting-pack-2.1-7.0, dotnet-targeting-pack-6.0, dotnet-host, dotnet-sdk-6.0-source-built-artifacts, aspnetcore-targeting-pack-7.0, dotnet-runtime-6.0, dotnet6, aspnetcore-runtime-6.0, dotnet-apphost-pack-7.0, dotnet-templates-6.0, dotnet-targeting-pack-7.0, dotnet7, dotnet-runtime-7.0, dotnet-hostfxr-7.0, dotnet-sdk-7.0, aspnetcore-targeting-pack-6.0, dotnet-templates-7.0, dotnet-hostfxr-6.0, dotnet-apphost-pack-6.0, aspnetcore-runtime-7.0, netstandard-targeting-pack-2.1, dotnet-sdk-7.0-source-built-artifacts
- USN-6505-1: libnghttp2-doc, libnghttp2-dev, nghttp2, nghttp2-proxy, nghttp2-client, nghttp2-server, libnghttp2-14
- USN-6574-1: golang-1.20-src, golang-1.20, golang-1.21, golang-1.21-doc, golang-1.20-doc, golang-1.21-src, golang-1.20-go, golang-1.21-go
- USN-6754-1: libnghttp2-doc, libnghttp2-dev, nghttp2, nghttp2-proxy, nghttp2-client, nghttp2-server, libnghttp2-14
- USN-6994-1: libnetty-java, netty