GHSA-H2P2-W857-329F vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-43Q4-PF55-3XHC vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-XGQ7-JP95-V2QV vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-43Q4-PF55-3XHC vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-8JGF-8R3G-HXH8 vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-GMVF-RV8W-2HRH vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-QQ72-VH82-FWV9 vulnerabilities

Vulnerabilities for packages: haproxy...

codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

Astra Linux – Vulnerability in HAPProxy

There is an issue of inconsistent interpretation of HTTP requests in HAProxy, known as “HTTP Request/Response Smuggling”. If this vulnerability is exploited, a remote attacker may gain access to paths that are restricted by an Access Control List ACL set on the product. As a result, the attacker...

CVE-2024-37082

When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP requests that bypass mTLS authentication to Cloud Foundry applications. You are affected if you have route-services enabled in routing-release and have...

Security update for haproxy

This update for haproxy fixes the following issues: Update to version 2.8.11+git0.01c1056a4: VUL-0: CVE-2024-53008: haproxy: HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server bsc1233973 BUG/MINOR: cfgparse-listen: fix option httpslog overrid...

SUSE-SU-2025:20101-1 Security update for haproxy

This update for haproxy fixes the following issues: Update to version 2.8.11+git0.01c1056a4: - VUL-0: CVE-2024-53008: haproxy: HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server bsc1233973 - BUG/MINOR: cfgparse-listen: fix option httpslog...

CLSA-2025-1736503350 haproxy: Fix of CVE-2023-40225

CVE-2023-40225: Fix forward empty Content-Length headers issue...

Medium: haproxy

Issue Overview: Inconsistent interpretation of HTTP requests 'HTTP Request/Response Smuggling' issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL Access Control List set on the product. As a result, the attacker may obtain...

Amazon Linux 2023 : haproxy (ALAS2023-2025-791)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-791 advisory. Inconsistent interpretation of HTTP requests 'HTTP Request/Response Smuggling' issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL...

Medium: haproxy

Issue Overview: Inconsistent interpretation of HTTP requests 'HTTP Request/Response Smuggling' issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL Access Control List set on the product. As a result, the attacker may obtain...

CLSA-2025-1736284126 haproxy: Fix of CVE-2023-0836

CVE-2023-0836: Fix information leak vulnerability in connection buffer by initializing 5 bytes in FCGIBEGINREQUEST record encoding...

SUSE SLES15 / openSUSE 15 Security Update : haproxy (SUSE-SU-2024:4390-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:4390-1 advisory. - CVE-2024-53008: Fixed HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non- compliant back-end server...

openSUSE Security Advisory (SUSE-SU-2024:4390-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...