medium6.5
CVE-2023-0056
An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service.
Impact
An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Haproxy | Haproxy | All versions |
| Redhat | Ceph Storage | Version 5.0 |
| Redhat | Software Collections | All versions |
| Redhat | Openshift Container Platform | Versions 4.12, 4.10, 4.11 |
| Redhat | Openshift Container Platform For Ibm Linuxone | Versions 4.12, 4.10, 4.11 |
| Redhat | Openshift Container Platform For Power | Versions 4.12, 4.10, 4.11 |
| Redhat | Openshift Container Platform Ibm Z Systems | Versions 4.12, 4.10, 4.11 |
| Fedoraproject | Extra Packages For Enterprise Linux | Version 8.0 |
| Fedoraproject | Fedora | Versions 36, 37 |