Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0056

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.

Published

2023-03-23T21:15:19.087

Last Modified

2025-02-25T20:15:31.793

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-400
  • Type: Secondary
    CWE-400
  • Type: Secondary
    CWE-400
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application haproxy haproxy - Yes
Application redhat ceph_storage 5.0 Yes
Application redhat software_collections - Yes
Application redhat openshift_container_platform 4.12 Yes
Application redhat openshift_container_platform_for_ibm_linuxone 4.12 Yes
Application redhat openshift_container_platform_for_power 4.12 Yes
Application redhat openshift_container_platform_ibm_z_systems 4.12 Yes
Operating System redhat enterprise_linux 9.0 No
Application redhat openshift_container_platform 4.10 Yes
Application redhat openshift_container_platform 4.11 Yes
Application redhat openshift_container_platform 4.12 Yes
Application redhat openshift_container_platform 4.10 Yes
Application redhat openshift_container_platform_for_ibm_linuxone 4.10 Yes
Application redhat openshift_container_platform_for_power 4.10 Yes
Application redhat openshift_container_platform_ibm_z_systems 4.10 Yes
Operating System redhat enterprise_linux 8.0 No
Application redhat openshift_container_platform 4.11 Yes
Application redhat openshift_container_platform_for_ibm_linuxone 4.11 Yes
Application redhat openshift_container_platform_for_power 4.11 Yes
Application redhat openshift_container_platform_ibm_z_systems 4.11 Yes
Operating System redhat enterprise_linux 8.0 No
Application redhat openshift_container_platform 4.12 Yes
Application redhat openshift_container_platform_for_ibm_linuxone 4.12 Yes
Application redhat openshift_container_platform_for_power 4.12 Yes
Application redhat openshift_container_platform_ibm_z_systems 4.12 Yes
Operating System redhat enterprise_linux 8.0 No
Application fedoraproject extra_packages_for_enterprise_linux 8.0 Yes
Operating System fedoraproject fedora 36 Yes
Operating System fedoraproject fedora 37 Yes
References