Exploit for Integer Overflow or Wraparound in Haproxy

CVE-2021-40346

githubexploit · 2021-09-10

Description

CVE-2021-40346 in haproxy is an integer overflow that can cause wraparound.

Entry point

ParameterContent-Length0 · header

Path/admin

HTTP header name length overflow leading to HTTP request smuggling via forged Content-Length header.

Affected Haproxy versions

Haproxy< 2.0.25, 2.2.17, 2.3.14, 2.4.4, 2.5

All known vulnerabilities by product

Alt Linux Astra Linux Haproxy Linuxmint Suse Ubuntu

CVSS 7.5 for CVE-2021-40346

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:NONE

Integrity:HIGH

Availability:NONE

Working code

98%confidence this exploit runs

Based on 50 file(s) in the source

EPSS Score

57.9%higher than 99.0% of all CVEs

Updated 2026-07-03

Exploit Details

Modified:2024-08-12 20:16

Last Seen:2025-09-05 18:57

Reporter:alikarimi999

Written in:C

Last commit:2021-09-13

Other exploits for CVE-2021-40346

Exploit for Integer Overflow or Wraparound in Haproxy

2026-07-08 jmg0929GITHUB

Exploit for Integer Overflow or Wraparound in Haproxy

2022-01-24 alexOargaGITHUB

Exploit for Integer Overflow or Wraparound in Haproxy

2021-09-10 donky16GITHUB

Exploit for Integer Overflow or Wraparound in Haproxy

2021-09-08 knqyf263GITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=1B448216-4957-55F3-B341-3A93EEE5557B
# CVE-2021-40346

Exploit Code

Share

Share on social media: