CVE-2019-11323

5.9

MEDIUMCVSS v3

Published

May 9, 2019

CVSS v2

4.3 MEDIUM

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/ssl_sock.h error.

haproxy/haproxy

GitHubHAProxy Load Balancer's development branch (mirror of git.haproxy.org)

>= 1.9.2, < 1.9.7NVD

haproxy

NPMHAProxy management and orchestration module

>= 1.9.2, < 1.9.7NVD

haproxy

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

This gem is intended for use as a HAProxy interface when you need to read statistics or if you like to manage proxies thru Ruby

>= 1.9.2, < 1.9.7NVD

observing/haproxy

GitHubHAProxy management and orchestration

>= 1.9.2, < 1.9.7NVD

Security Advisories

CVE-2019-11323

Description

More on this CVE