CVE-2026-110354

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service persistent worker-thread CPU exhaustion via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without...

CVE-2026-110354

HAProxy 3 versions prior to 3.4.6 are vulnerable to a denial of service (DoS) attack due to persistent worker-thread CPU exhaustion. The root cause involves an HTTP/1.1 chunked request where the parser repeatedly re-processes the same bytes without making progress, even after the H1 multiplexer d...

CVE-2026-110354

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service persistent worker-thread CPU exhaustion via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without...

Linux Distros Unpatched Vulnerability : CVE-2026-110353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service worker- thread CPU exhaustion via a truncated HTTP/2 PING frame...

Red Hat: CVE-2026-110353: haproxy: HAProxy: Denial of Service via truncated HTTP/2 PING frame

HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service worker-thread CPU exhaustion via a truncated HTTP/2 PING frame. h2chandleping in src/muxh2.c does not check for a short read, unlike the other H2 frame handlers. Because the incomplete frame cannot be...

Red Hat: CVE-2026-110354: haproxy: haproxy: Denial of Service via specially crafted HTTP/1.1 chunked request

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service persistent worker-thread CPU exhaustion via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without...

Linux Distros Unpatched Vulnerability : CVE-2026-110354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service persistent worker-thread CPU exhaustion via an HTTP/1.1 chunked...

PT-2026-120964

HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service worker-thread CPU exhaustion via a truncated HTTP/2 PING frame. h2c handle ping in src/mux h2.c does not check for a short read, unlike the other H2 frame handlers. Because the incomplete frame cannot b...

PT-2026-120965

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service persistent worker-thread CPU exhaustion via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without...

CLEANSTART-2026-GZ46020 In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled

Security vulnerability affects the trino package. In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled...

[SECURITY] [DLA 4842-1] haproxy security update

Debian LTS Advisory DLA-4842-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón October 18, 2026 https://wiki.debian.org/LTS Package : haproxy Version : 2.6.12-1+deb12u4 CVE ID : CVE-2026-33555, not yet available Three vulnerabilities were discovered in...

[SECURITY] [DSA 6570-1] haproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6570-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2026 https://www.debian.org/security/faq -...

Debian dla-4842 : haproxy - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4842 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4842-1 [email protected] https://www.debian.org/lts/security/...

Debian dsa-6570 : haproxy - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6570 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6570-1 [email protected] https://www.debian.org/security/...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: haproxy: haproxy-3.0.30-0.1.hum1 aarch64, s390x, x8664 haproxy-3.0.30-0.1.hum1.src src...

haproxy: HAProxy: Denial of Service via truncated HTTP/2 PING frame

A flaw was found in HAProxy. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a truncated HTTP/2 PING frame. Because the server fails to properly validate and process the incomplete frame, the pending data is never consumed, causing worker threads to spin continuous...

Astra Linux – Vulnerability in HAPProxy

HAProxy in versions up to 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the drl field of the fcgiconn structure. This vulnerability allows for incorrect parsing of buffer data as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, t...

Astra Linux – Vulnerability in HAPProxy

A issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. This issue can lead to a situation where the HTTP Host header is controlled by an attacker, due to a mismatch between the Host field and its corresponding authority value being mishandled...

Astra Linux – Vulnerability in HAPProxy

In HAProxy versions 2.2 through 3.1.6, under certain unusual configurations, there is a heap-based buffer overflow due to improper handling of replacing multiple short patterns with a longer one...

Astra Linux – Vulnerability in HAPProxy

HAProxy version 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert, located in src/hpack-tbl.c. This vulnerability occurs when hpackdhtdefrag’s return value is not validated when the memory pool is exhausted. An attacker can exploit this...