HAProxy up to 2.2.15/2.3.12/2.4.2 URL injection

Summaryinfo

A vulnerability, which was classified as critical, has been found in HAProxy up to 2.2.15/2.3.12/2.4.2. This affects an unknown function of the component URL Handler. Performing a manipulation results in injection. This vulnerability is known as CVE-2021-39240. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in HAProxy up to 2.2.15/2.3.12/2.4.2 (Firewall Software). This affects an unknown functionality of the component URL Handler. The manipulation with an unknown input leads to a injection vulnerability. CWE is classifying the issue as CWE-74. The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was published 08/18/2021. It is possible to read the advisory at mail-archive.com. This vulnerability is uniquely identified as CVE-2021-39240. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1055 according to MITRE ATT&CK.

Upgrading to version 2.2.16, 2.3.13 or 2.4.3 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.haproxy.org. The best possible mitigation is suggested to be upgrading to the latest version.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Firewall Software

Name

• HAProxy

Version

• 2.2.0
• 2.2.1
• 2.2.2
• 2.2.3
• 2.2.4
• 2.2.5
• 2.2.6
• 2.2.7
• 2.2.8
• 2.2.9
• 2.2.10
• 2.2.11
• 2.2.12
• 2.2.13
• 2.2.14
• 2.2.15
• 2.3.0
• 2.3.1
• 2.3.2
• 2.3.3
• 2.3.4
• 2.3.5
• 2.3.6
• 2.3.7
• 2.3.8
• 2.3.9
• 2.3.10
• 2.3.11
• 2.3.12
• 2.4.0
• 2.4.1
• 2.4.2

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion