USN-8972-1: HAProxy vulnerabilities

It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service. CVE-2026-110353 It was discovered that HAProxy incorrectly handled certain HTTP/1.1...

Improper HAProxy exception handling vulnerability

HAProxy has a vulnerability related to improper exception handling. This vulnerability stems from the lack of validation for short reads in h2chandleping within src/muxh2.c. As a result, truncated HTTP/2 PING frames cannot be processed, and no data is consumed. Consequently, H2 multiplexing tasks...