haproxy22 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the haproxy22 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Buffer Overflow	*
M Incomplete Filtering of Special Elements	*
H Creation of Temporary File With Insecure Permissions	<0:2.2.24-5.rhaos4.13.el8
H Directory Traversal	<0:2.2.24-5.rhaos4.13.el8
H Directory Traversal	<0:2.2.24-5.rhaos4.13.el8
H Link Following	<0:2.2.24-5.rhaos4.13.el8
H Improperly Controlled Sequential Memory Allocation	<0:2.2.24-5.rhaos4.13.el8
H Uncontrolled Recursion	<0:2.2.24-5.rhaos4.13.el8
H Uncontrolled Recursion	<0:2.2.24-5.rhaos4.13.el8
H Algorithmic Complexity	*
M Comparison Using Wrong Factors	*
M Improper Input Validation	<0:2.2.19-5.el8cp
M Insufficient Granularity of Access Control	<0:2.2.19-5.el8cp
M Improper Input Validation	<0:2.2.24-4.rhaos4.11.el8
M Improper Input Validation	<0:2.2.24-4.rhaos4.12.el8
M Improper Input Validation	<0:2.2.24-4.rhaos4.13.el8
M Authentication Bypass	*
M Improper Input Validation	*
H Directory Traversal	<0:2.2.24-3.rhaos4.13.el8
M HTTP Request Smuggling	*
C Incorrect Privilege Assignment	<0:2.2.19-4.el8
C Cross-site Scripting (XSS)	<0:2.2.19-4.el8
H Improper Input Validation	<0:2.2.24-3.rhaos4.13.el8
C Information Exposure	<0:2.2.19-4.el8
C Creation of Temporary File With Insecure Permissions	<0:2.2.19-4.el8
C Improper Input Validation	<0:2.2.19-4.el8
H Link Following	<0:2.2.15-4.el8
H Link Following	<0:2.2.15-4.el8
M Improper Certificate Validation	<0:2.2.24-1.el8
M Improper Certificate Validation	<0:2.2.24-1.el8
H Incorrect Behavior Order: Early Validation	<0:2.2.15-4.el8
H Incorrect Behavior Order: Early Validation	<0:2.2.15-4.el8
H Incorrect Behavior Order: Early Validation	<0:2.2.15-4.el8
H Incorrect Behavior Order: Early Validation	<0:2.2.15-4.el8
M Incorrect Default Permissions	<0:2.2.24-1.el8
M Incorrect Default Permissions	<0:2.2.24-1.el8
M Improper Initialization	<0:2.2.24-1.el8
H Improper Initialization	<0:2.2.24-3.rhaos4.13.el8
M Server-Side Request Forgery (SSRF)	<0:2.2.24-1.el8
M Server-Side Request Forgery (SSRF)	<0:2.2.24-1.el8
C Server-Side Request Forgery (SSRF)	<0:2.2.19-4.el8
M Directory Traversal	<0:2.2.24-1.el8
M Directory Traversal	<0:2.2.24-1.el8
M Improper Access Control	<0:2.2.24-1.el8
M Improper Access Control	<0:2.2.24-1.el8
M Resource Exhaustion	<0:2.2.24-1.el8
M Resource Exhaustion	<0:2.2.24-1.el8
H Link Following	<0:2.2.15-4.el8
H Link Following	<0:2.2.15-4.el8
H Link Following	<0:2.2.15-4.el8
H Link Following	<0:2.2.15-4.el8
H Incorrect Behavior Order: Early Validation	<0:2.2.15-4.el8
H Incorrect Behavior Order: Early Validation	<0:2.2.15-4.el8
H OS Command Injection	<0:2.2.15-4.el8
H OS Command Injection	<0:2.2.15-4.el8
H Exposure of Private Information ('Privacy Violation')	<0:2.2.15-4.el8
H Exposure of Private Information ('Privacy Violation')	<0:2.2.15-4.el8
H Insufficiently Protected Credentials	<0:2.2.15-4.el8
H Insufficiently Protected Credentials	<0:2.2.15-4.el8
H Link Following	<0:2.2.15-4.el8
H Link Following	<0:2.2.15-4.el8
H OS Command Injection	<0:2.2.15-4.el8
H OS Command Injection	<0:2.2.15-4.el8
H OS Command Injection	<0:2.2.15-4.el8
H OS Command Injection	<0:2.2.15-4.el8
C Arbitrary Code Injection	<0:2.2.19-4.el8
C Improper Privilege Management	<0:2.2.19-4.el8
M Incomplete Cleanup	*
M Incomplete Cleanup	*
H Resource Exhaustion	<0:2.2.24-3.rhaos4.13.el8
H Resource Exhaustion	<0:2.2.24-3.rhaos4.13.el8
H Resource Exhaustion	<0:2.2.24-3.rhaos4.13.el8
H Allocation of Resources Without Limits or Throttling	<0:2.2.24-3.rhaos4.13.el8
H Time-of-check Time-of-use (TOCTOU)	<0:2.2.24-3.rhaos4.13.el8
H HTTP Request Smuggling	<0:2.2.24-3.rhaos4.13.el8
H HTTP Request Smuggling	<0:2.2.24-3.rhaos4.11.el8
C HTTP Request Smuggling	<0:2.2.19-4.el8
M HTTP Request Smuggling	<0:2.2.24-3.rhaos4.12.el8
C Incorrect Authorization	<0:2.2.19-4.el8
H Allocation of Resources Without Limits or Throttling	<0:2.2.24-3.rhaos4.13.el8
M Allocation of Resources Without Limits or Throttling	<0:2.2.24-3.rhaos4.12.el8
M Resource Exhaustion	<0:2.2.15-6.el8
M Resource Exhaustion	<0:2.2.24-2.el8
H Resource Exhaustion	<0:2.2.24-3.rhaos4.13.el8
M Resource Exhaustion	<0:2.2.24-2.el8
M Resource Exhaustion	<0:2.2.19-3.el8
M CVE-2022-41715	<0:2.2.24-2.el8
M CVE-2022-41715	<0:2.2.24-1.el8
M Allocation of Resources Without Limits or Throttling	<0:2.2.24-1.el8
M Allocation of Resources Without Limits or Throttling	<0:2.2.24-2.el8
M HTTP Request Smuggling	<0:2.2.24-2.el8
M HTTP Request Smuggling	<0:2.2.24-1.el8
M Directory Traversal	<0:2.2.24-1.el8
M Directory Traversal	<0:2.2.24-1.el8
M Resource Exhaustion	<0:2.2.24-1.el8
M Resource Exhaustion	<0:2.2.24-1.el8
H Placement of User into Incorrect Group	<0:2.2.24-3.rhaos4.13.el8
M Resource Exhaustion	<0:2.2.24-1.el8
M Resource Exhaustion	<0:2.2.24-1.el8
M Information Exposure	<0:2.2.24-1.el8
M Information Exposure	<0:2.2.24-1.el8
M Improperly Controlled Sequential Memory Allocation	<0:2.2.24-1.el8
M Improperly Controlled Sequential Memory Allocation	<0:2.2.24-2.el8
M HTTP Request Smuggling	<0:2.2.24-1.el8
M HTTP Request Smuggling	<0:2.2.24-1.el8
M HTTP Request Smuggling	<0:2.2.24-1.el8
H Out-of-bounds Read	<0:2.2.24-3.rhaos4.11.el8
M Incorrect Authorization	<0:2.2.24-1.el8
M Incorrect Default Permissions	<0:2.2.24-1.el8
M Integer Overflow or Wraparound	<0:2.2.24-1.el8
M Buffer Overflow	<0:2.2.24-1.el8
M Missing Release of Resource after Effective Lifetime	<0:2.2.24-1.el8
H Use of a Broken or Risky Cryptographic Algorithm	<0:2.2.24-3.rhaos4.13.el8
M Use of a Broken or Risky Cryptographic Algorithm	<0:2.2.24-1.el8
M Resource Exhaustion	<0:2.2.24-1.el8
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.2.13-3.el8
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.2.15-4.el8
M Unchecked Return Value	<0:2.2.24-1.el8
M Incorrect Privilege Assignment	<0:2.2.24-1.el8
M Integer Overflow or Wraparound	<0:2.2.24-1.el8
M Improper Input Validation	<0:2.2.24-1.el8

Vulnerability

Vulnerable Version

Buffer Overflow