What’s Vulnerable › Vulnerabilities

CVE-2023-0056

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-03-23 · updated 2026-06-17
• Weakness: CWE-400

Description

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.

Affected products

• Fedoraproject Extra Packages For Enterprise Linux: 8.0
• Fedoraproject Fedora: 36, 37
• HAProxy: all versions
• Red Hat Ceph Storage: 5.0
• Red Hat OpenShift Container Platform 4.18: 4.12, 4.10, 4.11
• RedHat Openshift Container Platform For Ibm Linuxone: 4.12, 4.10, 4.11
• RedHat Openshift Container Platform For Power: 4.12, 4.10, 4.11
• RedHat Openshift Container Platform Ibm Z Systems: 4.12, 4.10, 4.11
• RedHat Software Collections: all versions

References

• https://access.redhat.com/security/cve/CVE-2023-0056
• https://access.redhat.com/security/cve/CVE-2023-0056

Get alerted when CVE-2023-0056 or the next vulnerability affects your stack