2172 matches found
Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2026-1069)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2026-1089)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MiracleLinux 9 : haproxy-2.8.14-1.el9_7.1 (AXSA:2025-11521:04)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-11521:04 advisory. haproxy: denial of service vulnerability in HAProxy mjson library CVE-2025-11230 Tenable has extracted the preceding description block directly from the...
GHSA-QQ72-VH82-FWV9 vulnerabilities
Vulnerabilities for packages: haproxy...
CVE-2024-53008 vulnerabilities
Vulnerabilities for packages: haproxy...
PT-2026-7983
Name of the Vulnerable Software and Affected Versions HAProxy affected versions not specified Description HAProxy is susceptible to a denial of service. A remote attacker may be able to cause HAProxy to crash by sending specially crafted INITIAL packets, specifically those using the NEW TOKEN...
PT-2026-8282
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected...
GHSA-FC36-5GC3-JMHX vulnerabilities
Vulnerabilities for packages: haproxy...
CVE-2025-11230 vulnerabilities
Vulnerabilities for packages: haproxy...
curl: HAProxy Connection Reuse leads to IP Spoofing and mTLS Context Smuggling
Executive Summary libcurl fails to respect the CURLOPTHAPROXYCLIENTIP configuration when reusing existing connections. Due to a missing check in the connection pooling logic, libcurl indiscriminately reuses a TCP/TLS connection established with a specific identity IP A for subsequent requests...
BIT-HAPROXY-2025-11230 Denial of service vulnerability in HAProxy mjson library
Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests...
CVE-2025-11230 affecting package haproxy for versions less than 2.4.24-2
CVE-2025-11230 affecting package haproxy for versions less than 2.4.24-2. A patched version of the package is available...
CVE-2025-11230 affecting package haproxy for versions less than 2.9.11-4
CVE-2025-11230 affecting package haproxy for versions less than 2.9.11-4. A patched version of the package is available...
CLSA-2025-1765545936 haproxy: Fix of CVE-2025-11230
CVE-2025-11230: fix possible DoS in mjson library when parsing numbers...
GHSA-7C64-F9JR-V9H2 vulnerabilities
Vulnerabilities for packages: cloud-provider-azure-fips, opentelemetry-collector, cloud-provider-aws-fips, keda-fips, kubernetes-csi-node-driver-registrar-fips, mods, trivy-operator-fips, age-fips, actions-runner-controller, sops-fips, nvidia-container-toolkit, cass-operator-fips,...
Oracle Linux 10 : haproxy (ELSA-2025-21691)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-21691 advisory. 3.0.5-4.1 - Fix denial of service vulnerability in mjson library CVE-2025-11230 Resolves: RHEL-126652 Tenable has extracted the preceding description block...
Linux Distros Unpatched Vulnerability : CVE-2025-59303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update...
RockyLinux 9 : haproxy (RLSA-2025:21693)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:21693 advisory. haproxy: denial of service vulnerability in HAProxy mjson library CVE-2025-11230 Tenable has extracted the preceding description block directly from the RockyLin...