USN-7805-1 — haproxy vulnerability

Summary

Oula Kivalo discovered that HAProxy incorrectly handled parsing certain
json numbers. A remote attacker could possibly use this issue to cause
HAProxy to crash, resulting in a denial of service.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	haproxy	2.4.24-0ubuntu0.22.04.3
Ubuntu · 24.04 LTS 24.04:LTS	haproxy	2.8.5-1ubuntu3.4

Vulnerabilities 1

High 7.5

CVE-2025-11230

Denial of service vulnerability in HAProxy mjson library

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

HAProxy HAProxy Community Edition haproxy haproxy Debian Ubuntu Azure Linux

Nov 19, 2025

References

report
https://ubuntu.com/security/CVE-2025-11230

haproxy vulnerability

Summary

Fixed packages 2

Vulnerabilities 1

Denial of service vulnerability in HAProxy mjson library

References