Every CVE Search/ Get API key

CVE-2023-25725

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are...

9.1 CriticalPublic exploitFix available

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
High

Exploit likelihood

5.49%Up 4.6 points since Feb 15, 2023
90%50%10%1%

What each source reports

NVD Score used 9.1

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

Record
CVE-2023-25725
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-444
Updated
2026-11-02
CVE List 9.1

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

Record
CVE-2023-25725
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-444
Updated
2026-11-02
EUVDEUVD-2023-29633 9.1

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

Record
EUVD-2023-29633
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-h2p2-w857-329f 9.1

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are...

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

Record
GHSA-h2p2-w857-329f
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-444
Updated
2026-11-02
OSVAZL-13569 9.1

CVE-2023-25725 affecting package haproxy for versions less than 2.4.22-1

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

Record
AZL-13569
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSV 9.1

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

Record
CVE-2023-25725
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
Show 20 moreShow less
OSVDEBIAN-CVE-2023-25725 9.1

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

Record
DEBIAN-CVE-2023-25725
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1141 7.5

haproxy security update

HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world's most visited ones.

Security Fix(es):

Initial description: Router PODs frequently getting restarted and haproxy process is receiving the segfault but it is not generating coredump even though the core file size is unlimited.

Upstream bug: https://github.com/haproxy/haproxy/issues/1972(CVE-2023-0056)

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.(CVE-2023-25725)

Record
OESA-2023-1141
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHBA-2023:1649 8.2

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11.35 packages and security update

Record
RHBA-2023:1649
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Updated
2026-11-02
OSVRHSA-2023:1268 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.12.8 security update

Record
RHSA-2023:1268
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Updated
2026-11-02
OSVRHSA-2023:1325 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.13.0 security update

Record
RHSA-2023:1325
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Updated
2026-11-02
OSVRHSA-2023:1655 9.8

Red Hat Security Advisory: OpenShift Container Platform 4.10.56 security update

Record
RHSA-2023:1655
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1696 8.2

Red Hat Security Advisory: haproxy security update

Record
RHSA-2023:1696
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Updated
2026-11-02
OSVRHSA-2023:1978 8.2

Red Hat Security Advisory: haproxy security update

Record
RHSA-2023:1978
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2023-25725 9.1

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

Record
UBUNTU-CVE-2023-25725
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:1696 No score

Moderate: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.

Security Fix(es):

  • haproxy: segfault DoS (CVE-2023-0056)
  • haproxy: request smuggling attack in HTTP/1 header parsing (CVE-2023-25725)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:1696
Updated
2026-11-02
OSVBIT-haproxy-2023-25725 No score

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31.

Record
BIT-haproxy-2023-25725
Updated
2026-11-02
OSVCLSA-2024-1733908866 No score

Fix CVE(s): CVE-2023-25725

  • SECURITY UPDATE: The HTTP header parsers in HAProxy may accept empty header field names
    • debian/patches/CVE-2023-25725.patch: prevent empty header field names
    • CVE-2023-25725
Record
CLSA-2024-1733908866
Updated
2026-11-02
OSVopenSUSE-SU-2024:12686-1 No score

haproxy-2.7.3+git0.1065b1000-1.1 on GA media

These are all security issues fixed in the haproxy-2.7.3+git0.1065b1000-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12686-1
Updated
2026-11-02
OSVSUSE-FU-2023:2117-1 No score

Feature update for haproxy

This update for haproxy fixes the following issues:

Update to version 2.0.31 (jsc#PED-3821):

  • BUG/CRITICAL: http: properly reject empty http header field names
  • CI: github: don't warn on deprecated openssl functions on windows
  • DOC: proxy-protocol: fix wrong byte in provided example
  • DOC: config: 'http-send-name-header' option may be used in default section
  • DOC: config: fix option spop-check proxy compatibility
  • BUG/MEDIUM: cache: use the correct time reference when comparing dates
  • BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  • BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  • BUG/MINOR: http-ana: make set-status also update txn->status
  • BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  • BUG/MINOR: promex: Don't forget to consume the request on error
  • BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  • BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  • BUILD: makefile: sort the features list
  • BUILD: makefile: build the features list dynamically
  • BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  • BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  • LICENSE: wurfl: clarify the dummy library license.
  • BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  • BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  • BUG/MINOR: ssl: Fix potential overflow
  • BUG/MEDIUM: ssl: Verify error codes can exceed 63
  • CI: github: change 'ubuntu-latest' to 'ubuntu-20.04'
  • SCRIPTS: announce-release: add a link to the data plane API
  • [RELEASE] Released version 2.0.30
  • Revert 'CI: determine actual LibreSSL version dynamically'
  • DOC: config: clarify the -m dir and -m dom pattern matching methods
  • DOC: config: clarify the fact that 'retries' is not just for connections
  • DOC: config: explain how default matching method for ACL works
  • DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  • DOC: config: provide some configuration hints for 'http-reuse'
  • BUILD: listener: fix build warning on global_listener_rwlock without threads
  • BUILD: peers: Remove unused variables
  • BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  • BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  • BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  • CI: emit the compiler's version in the build reports
  • CI: add monthly gcc cross compile jobs
  • BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  • BUG/MAJOR: stick-table: don't process store-response rules for applets
  • DOC: management: add forgotten 'show startup-logs'
  • CI: Replace the deprecated ::set-output command by writing to $GITHUB_OUTPUT in workflow definition
  • CI: Replace the deprecated ::set-output command by writing to $GITHUB_OUTPUT in matrix.py
  • BUG/MAJOR: stick-tables: do not try to index a server name for applets
  • DOC: configuration: missing 'if' in tcp-request content example
  • BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  • BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  • BUG/MEDIUM: lua: handle stick table implicit arguments right.
  • BUILD: cfgparse: Fix GCC warning about a variable used after realloc
  • BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  • BUG/MINOR: log: improper behavior when escaping log data
  • SCRIPTS: announce-release: update some URLs to https
  • BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  • BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  • BUG/MINOR: signals/poller: ensure wakeup from signals
  • BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  • BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  • REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  • BUG/MEDIUM: peers:…
Record
SUSE-FU-2023:2117-1
Updated
2026-11-02
OSVSUSE-FU-2023:2119-1 No score

Feature update for haproxy

This update for haproxy fixes the following issues:

Update to version 2.0.31 (jsc#PED-3821):

  • BUG/CRITICAL: http: properly reject empty http header field names
  • CI: github: don't warn on deprecated openssl functions on windows
  • DOC: proxy-protocol: fix wrong byte in provided example
  • DOC: config: 'http-send-name-header' option may be used in default section
  • DOC: config: fix option spop-check proxy compatibility
  • BUG/MEDIUM: cache: use the correct time reference when comparing dates
  • BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  • BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  • BUG/MINOR: http-ana: make set-status also update txn->status
  • BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  • BUG/MINOR: promex: Don't forget to consume the request on error
  • BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  • BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  • BUILD: makefile: sort the features list
  • BUILD: makefile: build the features list dynamically
  • BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  • BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  • LICENSE: wurfl: clarify the dummy library license.
  • BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  • BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  • BUG/MINOR: ssl: Fix potential overflow
  • BUG/MEDIUM: ssl: Verify error codes can exceed 63
  • CI: github: change 'ubuntu-latest' to 'ubuntu-20.04'
  • SCRIPTS: announce-release: add a link to the data plane API
  • [RELEASE] Released version 2.0.30
  • Revert 'CI: determine actual LibreSSL version dynamically'
  • DOC: config: clarify the -m dir and -m dom pattern matching methods
  • DOC: config: clarify the fact that 'retries' is not just for connections
  • DOC: config: explain how default matching method for ACL works
  • DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  • DOC: config: provide some configuration hints for 'http-reuse'
  • BUILD: listener: fix build warning on global_listener_rwlock without threads
  • BUILD: peers: Remove unused variables
  • BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  • BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  • BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  • CI: emit the compiler's version in the build reports
  • CI: add monthly gcc cross compile jobs
  • BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  • BUG/MAJOR: stick-table: don't process store-response rules for applets
  • DOC: management: add forgotten 'show startup-logs'
  • CI: Replace the deprecated ::set-output command by writing to $GITHUB_OUTPUT in workflow definition
  • CI: Replace the deprecated ::set-output command by writing to $GITHUB_OUTPUT in matrix.py
  • BUG/MAJOR: stick-tables: do not try to index a server name for applets
  • DOC: configuration: missing 'if' in tcp-request content example
  • BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  • BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  • BUG/MEDIUM: lua: handle stick table implicit arguments right.
  • BUILD: cfgparse: Fix GCC warning about a variable used after realloc
  • BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  • BUG/MINOR: log: improper behavior when escaping log data
  • SCRIPTS: announce-release: update some URLs to https
  • BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  • BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  • BUG/MINOR: signals/poller: ensure wakeup from signals
  • BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  • BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  • REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  • BUG/MEDIUM: peers:…
Record
SUSE-FU-2023:2119-1
Updated
2026-11-02
OSVSUSE-SU-2023:0411-1 No score

Security update for haproxy

This update for haproxy fixes the following issues:

  • CVE-2023-25725: Fixed a serious vulnerability in the HTTP/1 parser (bsc#1208132).
  • Fixed an issue where sensitive data might leak to the backend.
Record
SUSE-SU-2023:0411-1
Updated
2026-11-02
OSVSUSE-SU-2023:0412-1 No score

Security update for haproxy

This update for haproxy fixes the following issues:

  • CVE-2023-25725: Fixed a serious vulnerability in the HTTP/1 parser (bsc#1208132).
  • CVE-2023-0056: Fixed denial of service via crash in http_wait_for_response() (bsc#1207181).
Record
SUSE-SU-2023:0412-1
Updated
2026-11-02
OSVSUSE-SU-2023:0413-1 No score

Security update for haproxy

This update for haproxy fixes the following issues:

  • CVE-2023-25725: Fixed a serious vulnerability in the HTTP/1 parser (bsc#1208132).
  • CVE-2023-0056: Fixed denial of service via crash in http_wait_for_response() (bsc#1207181).
Record
SUSE-SU-2023:0413-1
Updated
2026-11-02
OSVUSN-5869-1 No score

haproxy vulnerability

Bahruz Jabiyev, Anthony Gavazzi, Engin Kirda, Kaan Onarlioglu, Adi Peleg, and Harvey Tuch discovered that HAProxy incorrectly handled empty header names. A remote attacker could possibly use this issue to manipulate headers and bypass certain authentication checks and restrictions.

Record
USN-5869-1
Updated
2026-11-02
OSVUSN-7135-1 No score

haproxy vulnerability

Bahruz Jabiyev, Anthony Gavazzi, Engin Kirda, Kaan Onarlioglu, Adi Peleg, and Harvey Tuch discovered that HAProxy incorrectly handled empty header names. A remote attacker could possibly use this issue to manipulate headers and bypass certain authentication checks and restrictions.

Record
USN-7135-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
haproxy
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.4.17-3.el9_1.2
2.4.17-3.el9_1.2
haproxy
Azure Linux:2
 before 2.4.22-1
2.4.22-1
haproxy
Bitnami
 before 2.0.31, 2.1.0 up to 2.2.29, 2.3.0 up to 2.4.22, 2.5.0 up to 2.5.12, 2.6.0 up to 2.6.9, 2.7.0 up to 2.7.3
2.0.312.2.292.4.222.5.122.6.92.7.3
haproxy
TuxCare:Ubuntu:16.04
 before 1.6.3-1ubuntu0.3+tuxcare.els2
1.6.3-1ubuntu0.3+tuxcare.els2
haproxy-doc
TuxCare:Ubuntu:16.04
 before 1.6.3-1ubuntu0.3+tuxcare.els2
1.6.3-1ubuntu0.3+tuxcare.els2
vim-haproxy
TuxCare:Ubuntu:16.04
 before 1.6.3-1ubuntu0.3+tuxcare.els2
1.6.3-1ubuntu0.3+tuxcare.els2
haproxy
Debian:12
 before 2.6.8-2
2.6.8-2
haproxy
Debian:13
 before 2.6.8-2
2.6.8-2
haproxy
Debian:14
 before 2.6.8-2
2.6.8-2
haproxy
Debian:10
 before 1.8.19-1+deb10u4, plus listed versions
1.8.19-11.8.19-1+deb10u11.8.19-1+deb10u21.8.19-1+deb10u2~bpo9+11.8.19-1+deb10u3
1.8.19-1+deb10u4
Show 123 moreShow less
Affected packages
PackageAffectedFixed
haproxy
Debian:11
From an advisory covering 2 CVEs
 before 2.2.9-2+deb11u4, plus listed versions
2.2.9-22.2.9-2+deb11u12.2.9-2+deb11u1~bpo10+12.2.9-2+deb11u22.2.9-2+deb11u2~bpo10+12.2.9-2+deb11u32.2.9-2+deb11u3~bpo10+1
2.2.9-2+deb11u4
haproxy
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 2.2.16-4.oe1
2.2.16-4.oe1
haproxy
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 2.2.16-4.oe1
2.2.16-4.oe1
haproxy
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 2.6.6-2.oe2203sp1
2.6.6-2.oe2203sp1
haproxy
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 2.6.6-2.oe2203sp1
2.6.6-2.oe2203sp1
cri-o
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:1.24.5-2.rhaos4.11.gitb007cb6.el8
0:1.24.5-2.rhaos4.11.gitb007cb6.el8
cri-o-debuginfo
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:1.24.5-2.rhaos4.11.gitb007cb6.el8
0:1.24.5-2.rhaos4.11.gitb007cb6.el8
cri-o-debugsource
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:1.24.5-2.rhaos4.11.gitb007cb6.el8
0:1.24.5-2.rhaos4.11.gitb007cb6.el8
haproxy
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.11.el8
0:2.2.24-3.rhaos4.11.el8
haproxy-debugsource
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.11.el8
0:2.2.24-3.rhaos4.11.el8
haproxy22
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.11.el8
0:2.2.24-3.rhaos4.11.el8
haproxy22-debuginfo
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.11.el8
0:2.2.24-3.rhaos4.11.el8
kernel-rt
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-core
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-debug
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-debug-core
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-debug-debuginfo
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-debug-devel
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-debug-kvm
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-debug-modules
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-debug-modules-extra
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-debug-modules-internal
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-debuginfo
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-debuginfo-common-x86_64
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-devel
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-kvm
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-modules
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-modules-extra
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-modules-internal
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
kernel-rt-selftests-internal
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.18.0-372.51.1.rt7.208.el8_6
0:4.18.0-372.51.1.rt7.208.el8_6
openshift
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.11.0-202304042055.p0.g8f6c8a6.assembly.stream.el8
0:4.11.0-202304042055.p0.g8f6c8a6.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.11::el8
From an advisory covering 2 CVEs
 before 0:4.11.0-202304042055.p0.g8f6c8a6.assembly.stream.el8
0:4.11.0-202304042055.p0.g8f6c8a6.assembly.stream.el8
openshift
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el8
0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el8
0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el8
openshift
Red Hat:openshift:4.12::el9
From an advisory covering 2 CVEs
 before 0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el9
0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el9
openshift-hyperkube
Red Hat:openshift:4.12::el9
From an advisory covering 2 CVEs
 before 0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el9
0:4.12.0-202303132316.p0.geab9cc9.assembly.stream.el9
haproxy
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.12.el8
0:2.2.24-3.rhaos4.12.el8
haproxy-debugsource
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.12.el8
0:2.2.24-3.rhaos4.12.el8
haproxy22
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.12.el8
0:2.2.24-3.rhaos4.12.el8
haproxy22-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 2 CVEs
 before 0:2.2.24-3.rhaos4.12.el8
0:2.2.24-3.rhaos4.12.el8
buildah
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 1:1.29.1-1.rhaos4.13.el9
1:1.29.1-1.rhaos4.13.el9
buildah-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 1:1.29.1-1.rhaos4.13.el9
1:1.29.1-1.rhaos4.13.el9
buildah-debugsource
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 1:1.29.1-1.rhaos4.13.el9
1:1.29.1-1.rhaos4.13.el9
buildah-tests
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 1:1.29.1-1.rhaos4.13.el9
1:1.29.1-1.rhaos4.13.el9
buildah-tests-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 1:1.29.1-1.rhaos4.13.el9
1:1.29.1-1.rhaos4.13.el9
openshift
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8
0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8
0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8
openshift
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9
0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9
openshift-hyperkube
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9
0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9
openshift-clients
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8
0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8
openshift-clients-redistributable
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8
0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8
openshift-clients
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
openshift-clients-redistributable
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
cri-o
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:1.26.3-3.rhaos4.13.git641290e.el9
0:1.26.3-3.rhaos4.13.git641290e.el9
cri-o-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:1.26.3-3.rhaos4.13.git641290e.el9
0:1.26.3-3.rhaos4.13.git641290e.el9
cri-o-debugsource
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 0:1.26.3-3.rhaos4.13.git641290e.el9
0:1.26.3-3.rhaos4.13.git641290e.el9
skopeo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 2:1.10.0-1.rhaos4.13.el9
2:1.10.0-1.rhaos4.13.el9
skopeo-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 2:1.10.0-1.rhaos4.13.el9
2:1.10.0-1.rhaos4.13.el9
skopeo-debugsource
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 2:1.10.0-1.rhaos4.13.el9
2:1.10.0-1.rhaos4.13.el9
skopeo-tests
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 2:1.10.0-1.rhaos4.13.el9
2:1.10.0-1.rhaos4.13.el9
haproxy
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:2.2.24-3.rhaos4.13.el8
0:2.2.24-3.rhaos4.13.el8
haproxy-debugsource
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:2.2.24-3.rhaos4.13.el8
0:2.2.24-3.rhaos4.13.el8
haproxy22
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:2.2.24-3.rhaos4.13.el8
0:2.2.24-3.rhaos4.13.el8
haproxy22-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:2.2.24-3.rhaos4.13.el8
0:2.2.24-3.rhaos4.13.el8
podman
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-catatonit
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-catatonit-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-debugsource
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-docker
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-gvproxy
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-gvproxy-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-plugins
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-plugins-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-remote
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-remote-debuginfo
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman-tests
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el8
3:4.4.1-3.rhaos4.13.el8
podman
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-debugsource
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-docker
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-gvproxy
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-gvproxy-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-plugins
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-plugins-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-remote
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-remote-debuginfo
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
podman-tests
Red Hat:openshift:4.13::el9
From an advisory covering 13 CVEs
 before 3:4.4.1-3.rhaos4.13.el9
3:4.4.1-3.rhaos4.13.el9
python-werkzeug
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:1.0.1-3.el8ost
0:1.0.1-3.el8ost
python3-werkzeug
Red Hat:openshift:4.13::el8
From an advisory covering 13 CVEs
 before 0:1.0.1-3.el8ost
0:1.0.1-3.el8ost
python-werkzeug
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 13 CVEs
 before 0:2.0.3-4.el9
0:2.0.3-4.el9
python3-werkzeug
Red Hat:openshift_ironic:4.13::el9
From an advisory covering 13 CVEs
 before 0:2.0.3-4.el9
0:2.0.3-4.el9
openshift
Red Hat:openshift:4.10::el7
From an advisory covering 10 CVEs
 before 0:4.10.0-202303221742.p0.g16bcd69.assembly.stream.el7
0:4.10.0-202303221742.p0.g16bcd69.assembly.stream.el7
openshift-hyperkube
Red Hat:openshift:4.10::el7
From an advisory covering 10 CVEs
 before 0:4.10.0-202303221742.p0.g16bcd69.assembly.stream.el7
0:4.10.0-202303221742.p0.g16bcd69.assembly.stream.el7
openshift
Red Hat:openshift:4.10::el8
From an advisory covering 10 CVEs
 before 0:4.10.0-202303221742.p0.g16bcd69.assembly.stream.el8
0:4.10.0-202303221742.p0.g16bcd69.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.10::el8
From an advisory covering 10 CVEs
 before 0:4.10.0-202303221742.p0.g16bcd69.assembly.stream.el8
0:4.10.0-202303221742.p0.g16bcd69.assembly.stream.el8
jenkins
Red Hat:openshift:4.10::el8
From an advisory covering 10 CVEs
 before 0:2.387.1.1680701869-1.el8
0:2.387.1.1680701869-1.el8
jenkins-2-plugins
Red Hat:openshift:4.10::el8
From an advisory covering 10 CVEs
 before 0:4.10.1680703106-1.el8
0:4.10.1680703106-1.el8
haproxy
Red Hat:openshift:4.10::el8
From an advisory covering 10 CVEs
 before 0:2.2.19-4.el8
0:2.2.19-4.el8
haproxy-debugsource
Red Hat:openshift:4.10::el8
From an advisory covering 10 CVEs
 before 0:2.2.19-4.el8
0:2.2.19-4.el8
haproxy22
Red Hat:openshift:4.10::el8
From an advisory covering 10 CVEs
 before 0:2.2.19-4.el8
0:2.2.19-4.el8
haproxy22-debuginfo
Red Hat:openshift:4.10::el8
From an advisory covering 10 CVEs
 before 0:2.2.19-4.el8
0:2.2.19-4.el8
haproxy
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.4.17-3.el9_1.2
0:2.4.17-3.el9_1.2
haproxy-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.4.17-3.el9_1.2
0:2.4.17-3.el9_1.2
haproxy-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.4.17-3.el9_1.2
0:2.4.17-3.el9_1.2
haproxy
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.4.7-2.el9_0.2
0:2.4.7-2.el9_0.2
haproxy-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.4.7-2.el9_0.2
0:2.4.7-2.el9_0.2
haproxy-debugsource
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.4.7-2.el9_0.2
0:2.4.7-2.el9_0.2
haproxy
SUSE:Linux Enterprise High Availability Extension 15 SP1
From an advisory covering 2 CVEs
 before 2.0.31-150100.8.31.1
2.0.31-150100.8.31.1
haproxy
SUSE:Linux Enterprise High Availability Extension 15 SP2
From an advisory covering 2 CVEs
 before 2.0.31-150200.11.20.1
2.0.31-150200.11.20.1
haproxy
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 2 CVEs
 before 2.0.31-150200.11.20.1
2.0.31-150200.11.20.1
haproxy
SUSE:Linux Enterprise Micro 5.3
 before 2.4.8+git0.d1f8d41e0-150400.3.10.1
2.4.8+git0.d1f8d41e0-150400.3.10.1
haproxy
SUSE:Linux Enterprise High Availability Extension 15 SP4
 before 2.4.8+git0.d1f8d41e0-150400.3.10.1
2.4.8+git0.d1f8d41e0-150400.3.10.1
haproxy
openSUSE:Leap Micro 5.3
 before 2.4.8+git0.d1f8d41e0-150400.3.10.1
2.4.8+git0.d1f8d41e0-150400.3.10.1
haproxy
openSUSE:Leap 15.4
 before 2.4.8+git0.d1f8d41e0-150400.3.10.1
2.4.8+git0.d1f8d41e0-150400.3.10.1
haproxy
SUSE:Linux Enterprise High Availability Extension 15 SP1
From an advisory covering 2 CVEs
 before 2.0.14-150100.8.27.1
2.0.14-150100.8.27.1
haproxy
SUSE:Linux Enterprise High Availability Extension 15 SP2
From an advisory covering 2 CVEs
 before 2.0.14-150200.11.15.1
2.0.14-150200.11.15.1
haproxy
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 2 CVEs
 before 2.0.14-150200.11.15.1
2.0.14-150200.11.15.1
haproxy
Ubuntu:Pro:16.04:LTS
 before 1.6.3-1ubuntu0.3+esm2, plus listed versions
1.5.14-11.5.15-11.6.2-11.6.2-21.6.2-2ubuntu1
Show 6 moreShow less
1.6.2-2ubuntu31.6.3-11.6.3-1ubuntu0.11.6.3-1ubuntu0.21.6.3-1ubuntu0.31.6.3-1ubuntu0.3+esm1
1.6.3-1ubuntu0.3+esm2
haproxy
Ubuntu:18.04:LTS
 before 1.8.8-1ubuntu0.13, plus listed versions
1.7.9-1ubuntu11.7.9-1ubuntu21.8.4-11.8.7-11.8.8-1
Show 10 moreShow less
1.8.8-1ubuntu0.11.8.8-1ubuntu0.21.8.8-1ubuntu0.31.8.8-1ubuntu0.41.8.8-1ubuntu0.61.8.8-1ubuntu0.71.8.8-1ubuntu0.81.8.8-1ubuntu0.91.8.8-1ubuntu0.101.8.8-1ubuntu0.11
1.8.8-1ubuntu0.13
haproxy
Ubuntu:20.04:LTS
 before 2.0.29-0ubuntu1.3, plus listed versions
2.0.5-12.0.8-12.0.9-12.0.10-12.0.10-1ubuntu1
Show 10 moreShow less
2.0.11-1ubuntu12.0.12-1ubuntu22.0.13-1ubuntu22.0.13-22.0.13-2ubuntu0.12.0.13-2ubuntu0.22.0.13-2ubuntu0.32.0.13-2ubuntu0.52.0.29-0ubuntu12.0.29-0ubuntu1.1
2.0.29-0ubuntu1.3
haproxy
Ubuntu:22.04:LTS
 before 2.4.18-0ubuntu1.2, plus listed versions
2.2.9-2ubuntu22.4.8-12.4.8-2ubuntu32.4.11-1ubuntu12.4.12-1ubuntu1
Show 5 moreShow less
2.4.12-1ubuntu22.4.13-1ubuntu12.4.14-1ubuntu12.4.18-0ubuntu12.4.18-0ubuntu1.1
2.4.18-0ubuntu1.2
haproxy
openSUSE:Tumbleweed
 before 2.7.3+git0.1065b1000-1.1
2.7.3+git0.1065b1000-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubkrillingws/LAB-CVE-2023-257252023-08-23

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-25725 is a critical vulnerability (CVSS 9.1) in Haproxy, published February 14, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.49%, the 92nd percentile. Fixed in haproxy 2.4.22-1.

References

Show 169 moreShow less
This page doesn't list everything

Left out here: the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open