Vendor
HAProxy
11 known vulnerabilities.
Products
HAProxy 9
HAProxy Enterprise Edition 2
Kubernetes Ingress Controller 1
Kubernetes Ingress Controller Enterprise 1
HAProxy Kubernetes Ingress Controller 1
Data Plane API EE 1
Data Plane API CE 1
Enterprise < 2.6.8 0
Enterprise < 2.7.1 0
Enterprise < 2.5.2 0
Enterprise < 2.2.27 0
Enterprise < 2.4.21 0
Enterprise < 2.5.11 0
Enterprise < 2.8 0
Enterprise 2.0 0
Enterprise 2.2 0
Enterprise 2.4 0
Enterprise 2.5 0
Enterprise 2.6 0
Enterprise 2.7 0
ALOHA 0
5 results · Clear filters · Feed
-
High 7.5
HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhau…
-
High 7.5
HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread …
-
High 7.5
An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/…
-
High 7.5
HAProxy - NULL Pointer Dereference in hpack_dht_insert Function
HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_defrag() when the memory pool is exhausted. An attacker can tri…
-
High 7.5
HAProxy - Integer Overflow in FCGI Demux Record Length Field
HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field…