CVE-2024-53008 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-53008 Interim 1 34 2025-12-23T01:03:41Z current 2024-11-29T00:12:30Z 2025-12-23T01:03:41Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-53008 Inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL (Access Control List) set on the product. As a result, the attacker may obtain sensitive information. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2024-December/020037.html E-Mail link for SUSE-SU-2024:4390-1 https://lists.suse.com/pipermail/sle-security-updates/2025-June/021219.html E-Mail link for SUSE-SU-2025:20101-1 https://lists.suse.com/pipermail/sle-security-updates/2025-June/021093.html E-Mail link for SUSE-SU-2025:20230-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sl-micro/6.0/baremetal-os-container:latest Container suse/sl-micro/6.0/base-os-container:latest Container suse/sl-micro/6.0/kvm-os-container:latest Container suse/sl-micro/6.0/rt-os-container:latest Container suse/sl-micro/6.0/toolbox:latest Image SL-Micro Image SL-Micro-Base Image SL-Micro-Base-RT Image SL-Micro-Base-RT-SelfInstall Image SL-Micro-Base-RT-encrypted Image SL-Micro-Base-SelfInstall Image SL-Micro-Base-encrypted Image SL-Micro-Base-qcow Image SL-Micro-Default Image SL-Micro-Default-SelfInstall Image SL-Micro-Default-encrypted Image SL-Micro-Default-qcow Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise High Availability Extension 15 SP2 SUSE Linux Enterprise High Availability Extension 15 SP3 SUSE Linux Enterprise High Availability Extension 15 SP4 SUSE Linux Enterprise High Availability Extension 15 SP5 SUSE Linux Enterprise High Availability Extension 15 SP6 SUSE Linux Enterprise High Availability Extension 15 SP7 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 openSUSE Leap 15.5 openSUSE Leap 15.6 glib2-tools-2.76.2-5.1 gpg2-2.4.4-slfo.1.1_3.1 haproxy haproxy-2.8.11+git0.01c1056a4-1.1 haproxy-2.8.11+git0.01c1056a4-150600.3.3.1 haproxy-2.8.11+git0.01c1056a4-slfo.1.1_1.1 libgio-2_0-0-2.76.2-5.1 libglib-2_0-0-2.76.2-5.1 libgmodule-2_0-0-2.76.2-5.1 libgobject-2_0-0-2.76.2-5.1 glib2-tools-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest gpg2-2.4.4-slfo.1.1_3.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest libgio-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest libglib-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest libgmodule-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest libgobject-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest glib2-tools-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest gpg2-2.4.4-slfo.1.1_3.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest libgio-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest libglib-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest libgmodule-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest libgobject-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest glib2-tools-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/kvm-os-container:latest libgio-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/kvm-os-container:latest libglib-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/kvm-os-container:latest libgmodule-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/kvm-os-container:latest libgobject-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/kvm-os-container:latest glib2-tools-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/rt-os-container:latest libgio-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/rt-os-container:latest libglib-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/rt-os-container:latest libgmodule-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/rt-os-container:latest libgobject-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/rt-os-container:latest gpg2-2.4.4-slfo.1.1_3.1 as a component of Container suse/sl-micro/6.0/toolbox:latest libglib-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/toolbox:latest libgmodule-2_0-0-2.76.2-5.1 as a component of Container suse/sl-micro/6.0/toolbox:latest glib2-tools-2.76.2-5.1 as a component of Image SL-Micro gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro libgio-2_0-0-2.76.2-5.1 as a component of Image SL-Micro libglib-2_0-0-2.76.2-5.1 as a component of Image SL-Micro libgmodule-2_0-0-2.76.2-5.1 as a component of Image SL-Micro libgobject-2_0-0-2.76.2-5.1 as a component of Image SL-Micro gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro-Base gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro-Base-RT gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro-Base-RT-SelfInstall gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro-Base-RT-encrypted gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro-Base-SelfInstall gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro-Base-encrypted gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro-Base-qcow gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro-Default gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro-Default-SelfInstall gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro-Default-encrypted gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SL-Micro-Default-qcow glib2-tools-2.76.2-5.1 as a component of Image SLE-Micro gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SLE-Micro libgio-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro libglib-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro libgmodule-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro libgobject-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro glib2-tools-2.76.2-5.1 as a component of Image SLE-Micro-Azure gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SLE-Micro-Azure libgio-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-Azure libglib-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-Azure libgmodule-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-Azure libgobject-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-Azure glib2-tools-2.76.2-5.1 as a component of Image SLE-Micro-BYOS gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SLE-Micro-BYOS libgio-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS libglib-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS libgmodule-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS libgobject-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS glib2-tools-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-Azure gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SLE-Micro-BYOS-Azure libgio-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-Azure libglib-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-Azure libgmodule-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-Azure libgobject-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-Azure glib2-tools-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-EC2 gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SLE-Micro-BYOS-EC2 libgio-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-EC2 libglib-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-EC2 libgmodule-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-EC2 libgobject-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-EC2 glib2-tools-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-GCE gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SLE-Micro-BYOS-GCE libgio-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-GCE libglib-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-GCE libgmodule-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-GCE libgobject-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-BYOS-GCE glib2-tools-2.76.2-5.1 as a component of Image SLE-Micro-EC2 gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SLE-Micro-EC2 libgio-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-EC2 libglib-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-EC2 libgmodule-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-EC2 libgobject-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-EC2 glib2-tools-2.76.2-5.1 as a component of Image SLE-Micro-GCE gpg2-2.4.4-slfo.1.1_3.1 as a component of Image SLE-Micro-GCE libgio-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-GCE libglib-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-GCE libgmodule-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-GCE libgobject-2_0-0-2.76.2-5.1 as a component of Image SLE-Micro-GCE haproxy-2.8.11+git0.01c1056a4-150600.3.3.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP6 haproxy-2.8.11+git0.01c1056a4-150600.3.3.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 haproxy-2.8.11+git0.01c1056a4-1.1 as a component of SUSE Linux Micro 6.0 haproxy-2.8.11+git0.01c1056a4-slfo.1.1_1.1 as a component of SUSE Linux Micro 6.1 haproxy-2.8.11+git0.01c1056a4-150600.3.3.1 as a component of openSUSE Leap 15.6 haproxy as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 haproxy as a component of SUSE Linux Enterprise High Availability Extension 15 SP2 haproxy as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 haproxy as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 haproxy as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 haproxy as a component of SUSE Linux Enterprise Micro 5.3 haproxy as a component of SUSE Linux Enterprise Micro 5.4 haproxy as a component of SUSE Linux Enterprise Micro 5.5 haproxy as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 haproxy as a component of openSUSE Leap 15.5 Inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL (Access Control List) set on the product. As a result, the attacker may obtain sensitive information. CVE-2024-53008 Container suse/sl-micro/6.0/baremetal-os-container:latest:glib2-tools-2.76.2-5.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:gpg2-2.4.4-slfo.1.1_3.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:libgio-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:libglib-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:libgmodule-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:libgobject-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/base-os-container:latest:glib2-tools-2.76.2-5.1 Container suse/sl-micro/6.0/base-os-container:latest:gpg2-2.4.4-slfo.1.1_3.1 Container suse/sl-micro/6.0/base-os-container:latest:libgio-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/base-os-container:latest:libglib-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/base-os-container:latest:libgmodule-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/base-os-container:latest:libgobject-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/kvm-os-container:latest:glib2-tools-2.76.2-5.1 Container suse/sl-micro/6.0/kvm-os-container:latest:libgio-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/kvm-os-container:latest:libglib-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/kvm-os-container:latest:libgmodule-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/kvm-os-container:latest:libgobject-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/rt-os-container:latest:glib2-tools-2.76.2-5.1 Container suse/sl-micro/6.0/rt-os-container:latest:libgio-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/rt-os-container:latest:libglib-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/rt-os-container:latest:libgmodule-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/rt-os-container:latest:libgobject-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/toolbox:latest:gpg2-2.4.4-slfo.1.1_3.1 Container suse/sl-micro/6.0/toolbox:latest:libglib-2_0-0-2.76.2-5.1 Container suse/sl-micro/6.0/toolbox:latest:libgmodule-2_0-0-2.76.2-5.1 Image SL-Micro:glib2-tools-2.76.2-5.1 Image SL-Micro:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro:libgio-2_0-0-2.76.2-5.1 Image SL-Micro:libglib-2_0-0-2.76.2-5.1 Image SL-Micro:libgmodule-2_0-0-2.76.2-5.1 Image SL-Micro:libgobject-2_0-0-2.76.2-5.1 Image SL-Micro-Base:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Base-RT:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Base-RT-SelfInstall:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Base-RT-encrypted:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Base-SelfInstall:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Base-VMware:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Base-encrypted:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Base-qcow:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Default:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Default-SelfInstall:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Default-VMware:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Default-encrypted:gpg2-2.4.4-slfo.1.1_3.1 Image SL-Micro-Default-qcow:gpg2-2.4.4-slfo.1.1_3.1 Image SLE-Micro:glib2-tools-2.76.2-5.1 Image SLE-Micro:gpg2-2.4.4-slfo.1.1_3.1 Image SLE-Micro:libgio-2_0-0-2.76.2-5.1 Image SLE-Micro:libglib-2_0-0-2.76.2-5.1 Image SLE-Micro:libgmodule-2_0-0-2.76.2-5.1 Image SLE-Micro:libgobject-2_0-0-2.76.2-5.1 Image SLE-Micro-Azure:glib2-tools-2.76.2-5.1 Image SLE-Micro-Azure:gpg2-2.4.4-slfo.1.1_3.1 Image SLE-Micro-Azure:libgio-2_0-0-2.76.2-5.1 Image SLE-Micro-Azure:libglib-2_0-0-2.76.2-5.1 Image SLE-Micro-Azure:libgmodule-2_0-0-2.76.2-5.1 Image SLE-Micro-Azure:libgobject-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS:glib2-tools-2.76.2-5.1 Image SLE-Micro-BYOS:gpg2-2.4.4-slfo.1.1_3.1 Image SLE-Micro-BYOS:libgio-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS:libglib-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS:libgmodule-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS:libgobject-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-Azure:glib2-tools-2.76.2-5.1 Image SLE-Micro-BYOS-Azure:gpg2-2.4.4-slfo.1.1_3.1 Image SLE-Micro-BYOS-Azure:libgio-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-Azure:libglib-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-Azure:libgmodule-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-Azure:libgobject-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-EC2:glib2-tools-2.76.2-5.1 Image SLE-Micro-BYOS-EC2:gpg2-2.4.4-slfo.1.1_3.1 Image SLE-Micro-BYOS-EC2:libgio-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-EC2:libglib-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-EC2:libgmodule-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-EC2:libgobject-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-GCE:glib2-tools-2.76.2-5.1 Image SLE-Micro-BYOS-GCE:gpg2-2.4.4-slfo.1.1_3.1 Image SLE-Micro-BYOS-GCE:libgio-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-GCE:libglib-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-GCE:libgmodule-2_0-0-2.76.2-5.1 Image SLE-Micro-BYOS-GCE:libgobject-2_0-0-2.76.2-5.1 Image SLE-Micro-EC2:glib2-tools-2.76.2-5.1 Image SLE-Micro-EC2:gpg2-2.4.4-slfo.1.1_3.1 Image SLE-Micro-EC2:libgio-2_0-0-2.76.2-5.1 Image SLE-Micro-EC2:libglib-2_0-0-2.76.2-5.1 Image SLE-Micro-EC2:libgmodule-2_0-0-2.76.2-5.1 Image SLE-Micro-EC2:libgobject-2_0-0-2.76.2-5.1 Image SLE-Micro-GCE:glib2-tools-2.76.2-5.1 Image SLE-Micro-GCE:gpg2-2.4.4-slfo.1.1_3.1 Image SLE-Micro-GCE:libgio-2_0-0-2.76.2-5.1 Image SLE-Micro-GCE:libglib-2_0-0-2.76.2-5.1 Image SLE-Micro-GCE:libgmodule-2_0-0-2.76.2-5.1 Image SLE-Micro-GCE:libgobject-2_0-0-2.76.2-5.1 SUSE Linux Enterprise High Availability Extension 15 SP6:haproxy-2.8.11+git0.01c1056a4-150600.3.3.1 SUSE Linux Enterprise High Availability Extension 15 SP7:haproxy-2.8.11+git0.01c1056a4-150600.3.3.1 SUSE Linux Micro 6.0:haproxy-2.8.11+git0.01c1056a4-1.1 SUSE Linux Micro 6.1:haproxy-2.8.11+git0.01c1056a4-slfo.1.1_1.1 openSUSE Leap 15.6:haproxy-2.8.11+git0.01c1056a4-150600.3.3.1 SUSE Linux Enterprise High Availability Extension 12 SP5:haproxy SUSE Linux Enterprise High Availability Extension 15 SP2:haproxy SUSE Linux Enterprise High Availability Extension 15 SP3:haproxy SUSE Linux Enterprise High Availability Extension 15 SP4:haproxy SUSE Linux Enterprise High Availability Extension 15 SP5:haproxy SUSE Linux Enterprise Micro 5.3:haproxy SUSE Linux Enterprise Micro 5.4:haproxy SUSE Linux Enterprise Micro 5.5:haproxy SUSE Linux Enterprise Server for SAP Applications 12 SP5:haproxy openSUSE Leap 15.5:haproxy moderate 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N