Every CVE Search/ Get API key

USN-5042-1

haproxy vulnerabilities

No scoreFix available

It was discovered that HAProxy incorrectly handled the HTTP/2 protocol. A remote attacker could possibly use this issue to bypass restrictions.

What each source reports

OSV No score

haproxy vulnerabilities

It was discovered that HAProxy incorrectly handled the HTTP/2 protocol. A remote attacker could possibly use this issue to bypass restrictions.

Record
USN-5042-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
haproxy
Ubuntu:20.04:LTS
before 2.0.13-2ubuntu0.2, plus listed versions
2.0.5-12.0.8-12.0.9-12.0.10-12.0.10-1ubuntu1
Show 5 moreShow less
2.0.11-1ubuntu12.0.12-1ubuntu22.0.13-1ubuntu22.0.13-22.0.13-2ubuntu0.1
2.0.13-2ubuntu0.2

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

USN-5042-1 is a vulnerability with no CVSS score yet in haproxy, published August 17, 2021. No source lists public exploit code. Fixed in haproxy 2.0.13-2ubuntu0.2.

References

MoveEnter Open