Linux Distros Unpatched Vulnerability : CVE-2014-6269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflows in the httprequestforwardbody function in protohttp.c in HAProxy 1.5-dev23 before 1.5.4 allow remote attackers to cause a denial of...

GHSA-H2P2-W857-329F vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-8JGF-8R3G-HXH8 vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-GMVF-RV8W-2HRH vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-XGQ7-JP95-V2QV vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-43Q4-PF55-3XHC vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-XGQ7-JP95-V2QV vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-43Q4-PF55-3XHC vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-8JGF-8R3G-HXH8 vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-QQ72-VH82-FWV9 vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-GMVF-RV8W-2HRH vulnerabilities

Vulnerabilities for packages: haproxy...

codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

Astra Linux – Vulnerability in HAPProxy

There is an issue of inconsistent interpretation of HTTP requests in HAProxy, known as “HTTP Request/Response Smuggling”. If this vulnerability is exploited, a remote attacker may gain access to paths that are restricted by an Access Control List ACL set on the product. As a result, the attacker...

CVE-2024-37082

When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP requests that bypass mTLS authentication to Cloud Foundry applications. You are affected if you have route-services enabled in routing-release and have...

Security update for haproxy

This update for haproxy fixes the following issues: Update to version 2.8.11+git0.01c1056a4: VUL-0: CVE-2024-53008: haproxy: HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server bsc1233973 BUG/MINOR: cfgparse-listen: fix option httpslog overrid...

SUSE-SU-2025:20101-1 Security update for haproxy

This update for haproxy fixes the following issues: Update to version 2.8.11+git0.01c1056a4: - VUL-0: CVE-2024-53008: haproxy: HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server bsc1233973 - BUG/MINOR: cfgparse-listen: fix option httpslog...

CLSA-2025-1736503350 haproxy: Fix of CVE-2023-40225

CVE-2023-40225: Fix forward empty Content-Length headers issue...

Medium: haproxy

Issue Overview: Inconsistent interpretation of HTTP requests 'HTTP Request/Response Smuggling' issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL Access Control List set on the product. As a result, the attacker may obtain...

Amazon Linux 2023 : haproxy (ALAS2023-2025-791)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-791 advisory. Inconsistent interpretation of HTTP requests 'HTTP Request/Response Smuggling' issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL...