Description
Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | haproxy | 1.4.23-1 | — |
| Debian 13 | haproxy | 1.4.23-1 | — |
| Debian 12 | haproxy | 1.4.23-1 | — |
| Debian 6.0 | haproxy | 1.4.8-1+squeeze1 | DSA-2711-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | haproxy | 1.4.22-4.el6_4 | RHSA-2013:0868 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 1 | haproxy | 1.4.22-5.el6op | RHSA-2013:0729 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | haproxy | 1.7.0-1.1 | openSUSE-SU-2024:10114-1 |
Advisories 4
- DSA-2711-1 haproxy - several Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10114-1 haproxy-1.7.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2013:0868 Red Hat Security Advisory: haproxy security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2013:0729 Red Hat Security Advisory: haproxy security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- FEDORA-2013-6253 vendor-advisory
- RHSA-2013:0868 vendor-advisory
- 52725 third-party-advisory
- FEDORA-2013-4807 vendor-advisory
- DSA-2711 vendor-advisory
- FEDORA-2013-4827 vendor-advisory
- 58820 vdb-entry
- USN-1800-1 vendor-advisory
- [oss-security] 20130403 CVE-2013-1912 : haproxy may crash on TCP content inspection rules mailing-list
- RHSA-2013:0729 vendor-advisory