NVD Vulnerability Detail

CVE-2019-18277

Summary	A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly rejected. The impact was limited but if combined with the "http-reuse always" setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).
Publication Date	Oct. 23, 2019, 11:15 p.m.
Registration Date	Jan. 26, 2021, 11:40 a.m.
Last Update	Nov. 21, 2024, 1:32 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:haproxy:haproxy::::::::					2.0.6

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00016.html
2	http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00016.html
3	http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00019.html
4	http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00019.html
5	https://git.haproxy.org/?p=haproxy-2.0.git%3Ba=commit%3Bh=196a7df44d8129d1adc795da020b722614d6a581
6	https://git.haproxy.org/?p=haproxy-2.0.git%3Ba=commit%3Bh=196a7df44d8129d1adc795da020b722614d6a581
7	https://lists.debian.org/debian-lts-announce/2022/05/msg00045.html
8	https://lists.debian.org/debian-lts-announce/2022/05/msg00045.html
9	https://nathandavison.com/blog/haproxy-http-request-smuggling	Exploit Third Party Advisory
10	https://nathandavison.com/blog/haproxy-http-request-smuggling	Exploit Third Party Advisory
11	https://usn.ubuntu.com/4174-1/
12	https://usn.ubuntu.com/4174-1/
13	https://www.mail-archive.com/haproxy%40formilux.org/msg34926.html
14	https://www.mail-archive.com/haproxy%40formilux.org/msg34926.html

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-444	HTTP リクエストスマグリング	https://cwe.mitre.org/data/definitions/444.html

JVN Vulnerability Information

HAProxy における入力確認に関する脆弱性

Title	HAProxy における入力確認に関する脆弱性
Summary	HAProxy には、入力確認に関する脆弱性が存在します。
Possible impacts	情報を改ざんされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 12, 2019, midnight
Registration Date	Oct. 31, 2019, 3:57 p.m.
Last Update	Oct. 31, 2019, 3:57 p.m.

Affected System

Willy Tarreau

HAProxy 2.0.6 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2019-18277	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18277
National Vulnerability Database (NVD)
2	CVE-2019-18277	https://nvd.nist.gov/vuln/detail/CVE-2019-18277

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
HAProxy
1	BUG/MEDIUM: http: also reject messages where "chunked" is missing from transfer-enoding	https://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=196a7df44d8129d1adc795da020b722614d6a581
The Mail Archive
2	[ANNOUNCE] haproxy-2.0.6	https://www.mail-archive.com/haproxy@formilux.org/msg34926.html

Change Log

No	Changed Details	Date of change
1	[2019年10月31日] 掲載	Oct. 31, 2019, 3:57 p.m.