CVE-2023-0056
Fixed in a distro release EPSS 2%CVSS 6.5
An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.
Products: haproxy, redhat ceph_storage, redhat software_collections, redhat openshift_container_platform, redhat openshift_container_platform_for_ibm_linuxone, redhat openshift_container_platform_for_power, redhat openshift_container_platform_ibm_z_systems, fedoraproject extra_packages_for_enterprise_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | haproxy | 2.4.17-3.el9_1.2 |
| Chainguard | haproxy-2.4 | 0 |
| Chainguard | haproxy-2.6 | 0 |
| Chainguard | haproxy-2.8 | 0 |
| Chainguard | haproxy-3.0 | 0 |
| Chainguard | haproxy-3.1 | 0 |
| Chainguard | haproxy-3.2 | 3.2.4-r1 |
| Chainguard | haproxy-3.3 | 3.3.2-r0 |
| Debian 11 | haproxy | 2.2.9-2+deb11u4 |
| Debian 12 | haproxy | 2.6.8-1 |
| Debian 13 | haproxy | 2.6.8-1 |
| Debian 14 | haproxy | 2.6.8-1 |
| Red Hat Enterprise Linux 9 | haproxy | 0:2.4.17-3.el9_1.2 |
| Red Hat Enterprise Linux 9 | haproxy-debuginfo | 0:2.4.17-3.el9_1.2 |
| Red Hat Enterprise Linux 9 | haproxy-debugsource | 0:2.4.17-3.el9_1.2 |
| Red Hat openshift 4.10 | haproxy | 0:2.2.19-3.el8 |
| Red Hat openshift 4.10 | haproxy-debugsource | 0:2.2.19-3.el8 |
| Red Hat openshift 4.10 | haproxy22 | 0:2.2.19-3.el8 |
| Red Hat openshift 4.10 | haproxy22-debuginfo | 0:2.2.19-3.el8 |
| Red Hat openshift 4.11 | haproxy | 0:2.2.24-2.el8 |
| Red Hat openshift 4.11 | haproxy-debugsource | 0:2.2.24-2.el8 |
| Red Hat openshift 4.11 | haproxy22 | 0:2.2.24-2.el8 |
| Red Hat openshift 4.11 | haproxy22-debuginfo | 0:2.2.24-2.el8 |
| Red Hat openshift 4.12 | buildah | 1:1.23.4-4.rhaos4.12.el8 |
| Red Hat openshift 4.12 | buildah | 1:1.23.4-4.rhaos4.12.el9 |
| Red Hat openshift 4.12 | buildah-debuginfo | 1:1.23.4-4.rhaos4.12.el9 |
| Red Hat openshift 4.12 | buildah-debuginfo | 1:1.23.4-4.rhaos4.12.el8 |
| Red Hat openshift 4.12 | buildah-debugsource | 1:1.23.4-4.rhaos4.12.el9 |
| Red Hat openshift 4.12 | buildah-debugsource | 1:1.23.4-4.rhaos4.12.el8 |
| Red Hat openshift 4.12 | buildah-tests | 1:1.23.4-4.rhaos4.12.el9 |
| Red Hat openshift 4.12 | buildah-tests | 1:1.23.4-4.rhaos4.12.el8 |
| Red Hat openshift 4.12 | buildah-tests-debuginfo | 1:1.23.4-4.rhaos4.12.el9 |
| Red Hat openshift 4.12 | buildah-tests-debuginfo | 1:1.23.4-4.rhaos4.12.el8 |
| Red Hat openshift 4.12 | conmon | 2:2.1.2-3.rhaos4.12.el8 |
| Red Hat openshift 4.12 | conmon | 2:2.1.2-4.rhaos4.12.el9 |
| Red Hat openshift 4.12 | conmon-debuginfo | 2:2.1.2-3.rhaos4.12.el8 |
| Red Hat openshift 4.12 | conmon-debuginfo | 2:2.1.2-4.rhaos4.12.el9 |
| Red Hat openshift 4.12 | conmon-debugsource | 2:2.1.2-4.rhaos4.12.el9 |
| Red Hat openshift 4.12 | conmon-debugsource | 2:2.1.2-3.rhaos4.12.el8 |
| Red Hat openshift 4.12 | container-selinux | 2:2.188.0-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | containernetworking-plugins | 0:1.0.1-6.rhaos4.12.el8 |
| Red Hat openshift 4.12 | containernetworking-plugins-debuginfo | 0:1.0.1-6.rhaos4.12.el8 |
| Red Hat openshift 4.12 | containernetworking-plugins-debugsource | 0:1.0.1-6.rhaos4.12.el8 |
| Red Hat openshift 4.12 | containers-common | 2:1-33.rhaos4.12.el8 |
| Red Hat openshift 4.12 | cri-o | 0:1.25.2-6.rhaos4.12.git3c4e50c.el8 |
| Red Hat openshift 4.12 | cri-o-debuginfo | 0:1.25.2-6.rhaos4.12.git3c4e50c.el8 |
| Red Hat openshift 4.12 | cri-o-debugsource | 0:1.25.2-6.rhaos4.12.git3c4e50c.el8 |
| Red Hat openshift 4.12 | crun | 0:1.4.2-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | crun | 0:1.4.2-3.rhaos4.12.el9 |
| Red Hat openshift 4.12 | crun-debuginfo | 0:1.4.2-3.rhaos4.12.el9 |
| Red Hat openshift 4.12 | crun-debuginfo | 0:1.4.2-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | crun-debugsource | 0:1.4.2-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | crun-debugsource | 0:1.4.2-3.rhaos4.12.el9 |
| Red Hat openshift 4.12 | fuse-overlayfs | 0:1.9-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | fuse-overlayfs-debuginfo | 0:1.9-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | fuse-overlayfs-debugsource | 0:1.9-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | haproxy | 0:2.2.24-2.el8 |
| Red Hat openshift 4.12 | haproxy-debugsource | 0:2.2.24-2.el8 |
| Red Hat openshift 4.12 | haproxy22 | 0:2.2.24-2.el8 |
| Red Hat openshift 4.12 | haproxy22-debuginfo | 0:2.2.24-2.el8 |
| Red Hat openshift 4.12 | kernel-rt | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-core | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-debug | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-debug-core | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-debug-debuginfo | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-debug-devel | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-debug-kvm | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-debug-modules | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-debug-modules-extra | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-debug-modules-internal | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-debuginfo | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-debuginfo-common-x86_64 | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-devel | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-kvm | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-modules | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-modules-extra | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-modules-internal | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | kernel-rt-selftests-internal | 0:4.18.0-372.43.1.rt7.200.el8_6 |
| Red Hat openshift 4.12 | openshift-clients | 0:4.12.0-202301312133.p0.gb05f7d4.assembly.stream.el8 |
| Red Hat openshift 4.12 | openshift-clients | 0:4.12.0-202301312133.p0.gb05f7d4.assembly.stream.el9 |
| Red Hat openshift 4.12 | openshift-clients-redistributable | 0:4.12.0-202301312133.p0.gb05f7d4.assembly.stream.el8 |
| Red Hat openshift 4.12 | openshift-clients-redistributable | 0:4.12.0-202301312133.p0.gb05f7d4.assembly.stream.el9 |
| Red Hat openshift 4.12 | podman | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-catatonit | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-catatonit-debuginfo | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-debuginfo | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-debugsource | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-docker | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-gvproxy | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-gvproxy-debuginfo | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-plugins | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-plugins-debuginfo | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-remote | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-remote-debuginfo | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | podman-tests | 3:4.2.0-5.rhaos4.12.el9 |
| Red Hat openshift 4.12 | runc | 3:1.1.4-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | runc-debuginfo | 3:1.1.4-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | runc-debugsource | 3:1.1.4-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | skopeo | 2:1.9.4-2.rhaos4.12.el9 |
| Red Hat openshift 4.12 | skopeo | 2:1.9.4-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | skopeo-debuginfo | 2:1.9.4-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | skopeo-debuginfo | 2:1.9.4-2.rhaos4.12.el9 |
| Red Hat openshift 4.12 | skopeo-debugsource | 2:1.9.4-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | skopeo-debugsource | 2:1.9.4-2.rhaos4.12.el9 |
| Red Hat openshift 4.12 | skopeo-tests | 2:1.9.4-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | skopeo-tests | 2:1.9.4-2.rhaos4.12.el9 |
| Red Hat openshift 4.12 | slirp4netns | 0:1.1.8-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | slirp4netns-debuginfo | 0:1.1.8-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | slirp4netns-debugsource | 0:1.1.8-2.rhaos4.12.el8 |
| Red Hat openshift 4.12 | toolbox | 0:0.1.1-3.rhaos4.12.el8 |
| Red Hat openshift 4.13 | buildah | 1:1.29.1-1.rhaos4.13.el9 |
| Red Hat openshift 4.13 | buildah-debuginfo | 1:1.29.1-1.rhaos4.13.el9 |
| Red Hat openshift 4.13 | buildah-debugsource | 1:1.29.1-1.rhaos4.13.el9 |
| Red Hat openshift 4.13 | buildah-tests | 1:1.29.1-1.rhaos4.13.el9 |
| Red Hat openshift 4.13 | buildah-tests-debuginfo | 1:1.29.1-1.rhaos4.13.el9 |
| Red Hat openshift 4.13 | cri-o | 0:1.26.3-3.rhaos4.13.git641290e.el9 |
| Red Hat openshift 4.13 | cri-o-debuginfo | 0:1.26.3-3.rhaos4.13.git641290e.el9 |
| Red Hat openshift 4.13 | cri-o-debugsource | 0:1.26.3-3.rhaos4.13.git641290e.el9 |
| Red Hat openshift 4.13 | haproxy | 0:2.2.24-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | haproxy-debugsource | 0:2.2.24-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | haproxy22 | 0:2.2.24-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | haproxy22-debuginfo | 0:2.2.24-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | openshift | 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8 |
| Red Hat openshift 4.13 | openshift | 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9 |
| Red Hat openshift 4.13 | openshift-clients | 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8 |
| Red Hat openshift 4.13 | openshift-clients | 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9 |
| Red Hat openshift 4.13 | openshift-clients-redistributable | 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8 |
| Red Hat openshift 4.13 | openshift-clients-redistributable | 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9 |
| Red Hat openshift 4.13 | openshift-hyperkube | 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9 |
| Red Hat openshift 4.13 | openshift-hyperkube | 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8 |
| Red Hat openshift 4.13 | podman | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman | 3:4.4.1-3.rhaos4.13.el9 |
| Red Hat openshift 4.13 | podman-catatonit | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-catatonit-debuginfo | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-debuginfo | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-debuginfo | 3:4.4.1-3.rhaos4.13.el9 |
| Red Hat openshift 4.13 | podman-debugsource | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-debugsource | 3:4.4.1-3.rhaos4.13.el9 |
| Red Hat openshift 4.13 | podman-docker | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-docker | 3:4.4.1-3.rhaos4.13.el9 |
| Red Hat openshift 4.13 | podman-gvproxy | 3:4.4.1-3.rhaos4.13.el9 |
| Red Hat openshift 4.13 | podman-gvproxy | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-gvproxy-debuginfo | 3:4.4.1-3.rhaos4.13.el9 |
| Red Hat openshift 4.13 | podman-gvproxy-debuginfo | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-plugins | 3:4.4.1-3.rhaos4.13.el9 |
| Red Hat openshift 4.13 | podman-plugins | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-plugins-debuginfo | 3:4.4.1-3.rhaos4.13.el9 |
| Red Hat openshift 4.13 | podman-plugins-debuginfo | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-remote | 3:4.4.1-3.rhaos4.13.el9 |
| Red Hat openshift 4.13 | podman-remote | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-remote-debuginfo | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-remote-debuginfo | 3:4.4.1-3.rhaos4.13.el9 |
| Red Hat openshift 4.13 | podman-tests | 3:4.4.1-3.rhaos4.13.el8 |
| Red Hat openshift 4.13 | podman-tests | 3:4.4.1-3.rhaos4.13.el9 |
| Red Hat openshift 4.13 | python-werkzeug | 0:1.0.1-3.el8ost |
| Red Hat openshift 4.13 | python3-werkzeug | 0:1.0.1-3.el8ost |
| Red Hat openshift 4.13 | skopeo | 2:1.10.0-1.rhaos4.13.el9 |
| Red Hat openshift 4.13 | skopeo-debuginfo | 2:1.10.0-1.rhaos4.13.el9 |
| Red Hat openshift 4.13 | skopeo-debugsource | 2:1.10.0-1.rhaos4.13.el9 |
| Red Hat openshift 4.13 | skopeo-tests | 2:1.10.0-1.rhaos4.13.el9 |
| Red Hat openshift 4.9 | haproxy | 0:2.2.15-6.el8 |
| Red Hat openshift 4.9 | haproxy-debugsource | 0:2.2.15-6.el8 |
| Red Hat openshift 4.9 | haproxy22 | 0:2.2.15-6.el8 |
| Red Hat openshift 4.9 | haproxy22-debuginfo | 0:2.2.15-6.el8 |
| Red Hat openshift ironic 4.13 | python-werkzeug | 0:2.0.3-4.el9 |
| Red Hat openshift ironic 4.13 | python3-werkzeug | 0:2.0.3-4.el9 |
| Red Hat rhel eus 9.0 | haproxy | 0:2.4.7-2.el9_0.2 |
| Red Hat rhel eus 9.0 | haproxy-debuginfo | 0:2.4.7-2.el9_0.2 |
| Red Hat rhel eus 9.0 | haproxy-debugsource | 0:2.4.7-2.el9_0.2 |
| SUSE Linux Enterprise High Availability Extension 15 SP1 | haproxy | 2.0.14-150100.8.27.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP1 | haproxy | 2.0.31-150100.8.31.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP2 | haproxy | 2.0.31-150200.11.20.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP2 | haproxy | 2.0.14-150200.11.15.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP3 | haproxy | 2.0.14-150200.11.15.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP3 | haproxy | 2.0.31-150200.11.20.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP4 | haproxy | 2.4.8+git0.d1f8d41e0-150400.3.6.1 |
| SUSE Linux Enterprise Micro 5.3 | haproxy | 2.4.8+git0.d1f8d41e0-150400.3.6.1 |
| Ubuntu 20.04 LTS | haproxy | 2.0.29-0ubuntu1.1 |
| Ubuntu 22.04 LTS | haproxy | 2.4.18-0ubuntu1.1 |
| Wolfi | haproxy-3.2 | 3.2.4-r1 |
| Wolfi | haproxy-3.3 | 3.3.2-r0 |
| openSUSE Leap 15.4 | haproxy | 2.4.8+git0.d1f8d41e0-150400.3.6.1 |
| openSUSE Leap Micro 5.3 | haproxy | 2.4.8+git0.d1f8d41e0-150400.3.6.1 |