Bug 2160808 (CVE-2023-0056)

Summary:	CVE-2023-0056 haproxy: segfault DoS
Product:	[Other] Security Response	Reporter:	Nick Tait <ntait>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	amctagga, aoconnor, bniver, dfreiber, flucifre, gmeno, hhorak, jburrell, jorton, mbenjamin, mhackett, redhat-bugzilla, rogbas, rohara, sostapov, vereddy, vkumar
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-05-18 06:32:34 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2161137, 2161138, 2161139, 2161140, 2161141, 2163700, 2174172, 2174173, 2221095, 2221096
Bug Blocks:	2158260

Description Nick Tait 2023-01-13 19:14:36 UTC

Initial description: Router PODs frequently getting restarted and haproxy process is receiving the segfault but it is not generating coredump even though the core file size is unlimited.

Upstream bug: https://github.com/haproxy/haproxy/issues/1972

Comment 3 Sandipan Roy 2023-01-16 05:16:55 UTC

Created haproxy tracking bugs for this issue:

Affects: fedora-all [bug 2161138]


Created haproxy18 tracking bugs for this issue:

Affects: epel-all [bug 2161137]

Comment 10 errata-xmlrpc 2023-04-11 14:24:41 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2023:1696 https://access.redhat.com/errata/RHSA-2023:1696

Comment 11 errata-xmlrpc 2023-04-25 10:24:11 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2023:1978 https://access.redhat.com/errata/RHSA-2023:1978

Comment 12 errata-xmlrpc 2023-05-17 22:53:41 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.13

Via RHSA-2023:1325 https://access.redhat.com/errata/RHSA-2023:1325

Comment 13 Product Security DevOps Team 2023-05-18 06:32:31 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2023-0056

Comment 14 errata-xmlrpc 2024-02-08 16:57:34 UTC

This issue has been addressed in the following products:

  Red Hat Ceph Storage 5.3

Via RHSA-2024:0746 https://access.redhat.com/errata/RHSA-2024:0746