CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-40346

An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.886

EPSS Ranking 99.5%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2021-40346

Haproxy » Haproxy » Version: 2.0.0

cpe:2.3:a:haproxy:haproxy:2.0.0
Haproxy » Haproxy » Version: 2.0.1

cpe:2.3:a:haproxy:haproxy:2.0.1
Haproxy » Haproxy » Version: 2.0.10

cpe:2.3:a:haproxy:haproxy:2.0.10
Haproxy » Haproxy » Version: 2.0.11

cpe:2.3:a:haproxy:haproxy:2.0.11
Haproxy » Haproxy » Version: 2.0.12

cpe:2.3:a:haproxy:haproxy:2.0.12
Haproxy » Haproxy » Version: 2.0.13

cpe:2.3:a:haproxy:haproxy:2.0.13
Haproxy » Haproxy » Version: 2.0.14

cpe:2.3:a:haproxy:haproxy:2.0.14
Haproxy » Haproxy » Version: 2.0.15

cpe:2.3:a:haproxy:haproxy:2.0.15
Haproxy » Haproxy » Version: 2.0.16

cpe:2.3:a:haproxy:haproxy:2.0.16
Haproxy » Haproxy » Version: 2.0.17

cpe:2.3:a:haproxy:haproxy:2.0.17
Haproxy » Haproxy » Version: 2.0.18

cpe:2.3:a:haproxy:haproxy:2.0.18
Haproxy » Haproxy » Version: 2.0.19

cpe:2.3:a:haproxy:haproxy:2.0.19
Haproxy » Haproxy » Version: 2.0.2

cpe:2.3:a:haproxy:haproxy:2.0.2
Haproxy » Haproxy » Version: 2.0.20

cpe:2.3:a:haproxy:haproxy:2.0.20
Haproxy » Haproxy » Version: 2.0.21

cpe:2.3:a:haproxy:haproxy:2.0.21
Haproxy » Haproxy » Version: 2.0.22

cpe:2.3:a:haproxy:haproxy:2.0.22
Haproxy » Haproxy » Version: 2.0.23

cpe:2.3:a:haproxy:haproxy:2.0.23
Haproxy » Haproxy » Version: 2.0.24

cpe:2.3:a:haproxy:haproxy:2.0.24
Haproxy » Haproxy » Version: 2.0.3

cpe:2.3:a:haproxy:haproxy:2.0.3
Haproxy » Haproxy » Version: 2.0.4

cpe:2.3:a:haproxy:haproxy:2.0.4
Haproxy » Haproxy » Version: 2.0.5

cpe:2.3:a:haproxy:haproxy:2.0.5
Haproxy » Haproxy » Version: 2.0.6

cpe:2.3:a:haproxy:haproxy:2.0.6
Haproxy » Haproxy » Version: 2.0.7

cpe:2.3:a:haproxy:haproxy:2.0.7
Haproxy » Haproxy » Version: 2.0.8

cpe:2.3:a:haproxy:haproxy:2.0.8
Haproxy » Haproxy » Version: 2.0.9

cpe:2.3:a:haproxy:haproxy:2.0.9
Haproxy » Haproxy » Version: 2.2.0

cpe:2.3:a:haproxy:haproxy:2.2.0
Haproxy » Haproxy » Version: 2.2.1

cpe:2.3:a:haproxy:haproxy:2.2.1
Haproxy » Haproxy » Version: 2.2.10

cpe:2.3:a:haproxy:haproxy:2.2.10
Haproxy » Haproxy » Version: 2.2.11

cpe:2.3:a:haproxy:haproxy:2.2.11
Haproxy » Haproxy » Version: 2.2.12

cpe:2.3:a:haproxy:haproxy:2.2.12
Haproxy » Haproxy » Version: 2.2.13

cpe:2.3:a:haproxy:haproxy:2.2.13
Haproxy » Haproxy » Version: 2.2.14

cpe:2.3:a:haproxy:haproxy:2.2.14
Haproxy » Haproxy » Version: 2.2.15

cpe:2.3:a:haproxy:haproxy:2.2.15
Haproxy » Haproxy » Version: 2.2.16

cpe:2.3:a:haproxy:haproxy:2.2.16
Haproxy » Haproxy » Version: 2.2.2

cpe:2.3:a:haproxy:haproxy:2.2.2
Haproxy » Haproxy » Version: 2.2.3

cpe:2.3:a:haproxy:haproxy:2.2.3
Haproxy » Haproxy » Version: 2.2.4

cpe:2.3:a:haproxy:haproxy:2.2.4
Haproxy » Haproxy » Version: 2.2.5

cpe:2.3:a:haproxy:haproxy:2.2.5
Haproxy » Haproxy » Version: 2.2.6

cpe:2.3:a:haproxy:haproxy:2.2.6
Haproxy » Haproxy » Version: 2.2.7

cpe:2.3:a:haproxy:haproxy:2.2.7
Haproxy » Haproxy » Version: 2.2.8

cpe:2.3:a:haproxy:haproxy:2.2.8
Haproxy » Haproxy » Version: 2.2.9

cpe:2.3:a:haproxy:haproxy:2.2.9
Haproxy » Haproxy » Version: 2.3.0

cpe:2.3:a:haproxy:haproxy:2.3.0
Haproxy » Haproxy » Version: 2.3.1

cpe:2.3:a:haproxy:haproxy:2.3.1
Haproxy » Haproxy » Version: 2.3.10

cpe:2.3:a:haproxy:haproxy:2.3.10
Haproxy » Haproxy » Version: 2.3.11

cpe:2.3:a:haproxy:haproxy:2.3.11
Haproxy » Haproxy » Version: 2.3.12

cpe:2.3:a:haproxy:haproxy:2.3.12
Haproxy » Haproxy » Version: 2.3.13

cpe:2.3:a:haproxy:haproxy:2.3.13
Haproxy » Haproxy » Version: 2.3.2

cpe:2.3:a:haproxy:haproxy:2.3.2
Haproxy » Haproxy » Version: 2.3.3

cpe:2.3:a:haproxy:haproxy:2.3.3
Haproxy » Haproxy » Version: 2.3.4

cpe:2.3:a:haproxy:haproxy:2.3.4
Haproxy » Haproxy » Version: 2.3.5

cpe:2.3:a:haproxy:haproxy:2.3.5
Haproxy » Haproxy » Version: 2.3.6

cpe:2.3:a:haproxy:haproxy:2.3.6
Haproxy » Haproxy » Version: 2.3.7

cpe:2.3:a:haproxy:haproxy:2.3.7
Haproxy » Haproxy » Version: 2.3.8

cpe:2.3:a:haproxy:haproxy:2.3.8
Haproxy » Haproxy » Version: 2.3.9

cpe:2.3:a:haproxy:haproxy:2.3.9
Haproxy » Haproxy » Version: 2.4.0

cpe:2.3:a:haproxy:haproxy:2.4.0
Haproxy » Haproxy » Version: 2.4.1

cpe:2.3:a:haproxy:haproxy:2.4.1
Haproxy » Haproxy » Version: 2.4.2

cpe:2.3:a:haproxy:haproxy:2.4.2
Haproxy » Haproxy » Version: 2.4.3

cpe:2.3:a:haproxy:haproxy:2.4.3
Haproxy » Haproxy » Version: 2.5

cpe:2.3:a:haproxy:haproxy:2.5
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-40346

Products

Pricing

Contact Us