Search for vulnerabilities
Vulnerability details: VCID-djkt-wp9t-9yfz
Vulnerability ID VCID-djkt-wp9t-9yfz
Aliases CVE-2023-0056
Summary An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.
Status Published
Exploitability 0.5
Weighted Severity 5.9
Risk 3.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-400 Uncontrolled Resource Consumption
System Score Found at
cvssv3 4.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0056.json
cvssv3.1 6.5 https://access.redhat.com/security/cve/CVE-2023-0056
ssvc Track https://access.redhat.com/security/cve/CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
epss 0.00148 https://api.first.org/data/v1/epss?cve=CVE-2023-0056
cvssv3.1 7.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 6.5 https://nvd.nist.gov/vuln/detail/CVE-2023-0056
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0056.json
https://api.first.org/data/v1/epss?cve=CVE-2023-0056
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0056
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25725
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2160808 https://bugzilla.redhat.com/show_bug.cgi?id=2160808
cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:-:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:haproxy:haproxy:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ceph_storage:5.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:ceph_storage:5.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.10:*:*:*:*:*:arm64:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift_container_platform:4.10:*:*:*:*:*:arm64:*
cpe:2.3:a:redhat:openshift_container_platform:4.11:*:*:*:*:*:arm64:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift_container_platform:4.11:*:*:*:*:*:arm64:*
cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:arm64:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:arm64:*
cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
CVE-2023-0056 https://access.redhat.com/security/cve/CVE-2023-0056
CVE-2023-0056 https://nvd.nist.gov/vuln/detail/CVE-2023-0056
RHSA-2023:0727 https://access.redhat.com/errata/RHSA-2023:0727
RHSA-2023:1325 https://access.redhat.com/errata/RHSA-2023:1325
RHSA-2023:1696 https://access.redhat.com/errata/RHSA-2023:1696
RHSA-2023:1978 https://access.redhat.com/errata/RHSA-2023:1978
RHSA-2024:0746 https://access.redhat.com/errata/RHSA-2024:0746
USN-5819-1 https://usn.ubuntu.com/5819-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0056.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://access.redhat.com/security/cve/CVE-2023-0056
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T19:35:23Z/ Found at https://access.redhat.com/security/cve/CVE-2023-0056
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-0056
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.36275
EPSS Score 0.00148
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:16:32.014269+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/5819-1/ 36.1.3