{"id":"CVE-2025-32464","aliases":["AZL-59712","BIT-haproxy-2025-32464","DEBIAN-CVE-2025-32464","DLA-4135-1","EUVD-2025-10415","GHSA-frg5-h47x-75j9","MGASA-2025-0138","OESA-2025-1495","SUSE-SU-2025:1264-1","SUSE-SU-2025:1338-1","UBUNTU-CVE-2025-32464","USN-7431-1","USN-7431-2","openSUSE-SU-2025:15200-1"],"status":"published","title":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap...","description":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0078,"percentile":0.56231,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1025"],"published":"2025-04-09T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"haproxy","fixed_in":["2.9.11-3"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"haproxy","fixed_in":["2.9.6","3.1.7"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"haproxy","fixed_in":["2.6.12-1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"haproxy","fixed_in":["3.0.10-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"haproxy","fixed_in":["3.0.10-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"haproxy","fixed_in":["2.2.9-2+deb11u7"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"haproxy","fixed_in":["2.8.14-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"haproxy","fixed_in":["2.2.16-9.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"haproxy","fixed_in":["2.6.6-16.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"haproxy","fixed_in":["2.6.6-16.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"haproxy","fixed_in":["2.9.5-9.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"haproxy","fixed_in":["2.9.5-9.oe2403sp1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"haproxy","fixed_in":["2.8.11+git0.01c1056a4-150600.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"haproxy","fixed_in":["2.8.11+git0.01c1056a4-150600.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"haproxy","fixed_in":["2.4.22+git0.f8e3218e2-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"haproxy","fixed_in":["2.4.22+git0.f8e3218e2-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"haproxy","fixed_in":["2.4.22+git0.f8e3218e2-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"haproxy","fixed_in":["2.4.22+git0.f8e3218e2-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP5","package":"haproxy","fixed_in":["2.4.22+git0.f8e3218e2-150400.3.22.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"haproxy","fixed_in":["2.4.24-0ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"haproxy","fixed_in":["2.8.5-1ubuntu3.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.04","package":"haproxy","fixed_in":["3.0.8-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"haproxy","fixed_in":["3.2.0+git0.e134140d2-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.11-3"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"haproxy","ranges":[{"type":"SEMVER","events":[{"introduced":"2.2.0"},{"fixed":"2.9.6"},{"introduced":"3.0.0"},{"fixed":"3.1.7"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.12-1+deb12u2"}]}],"versions":["2.6.12-1","2.6.12-1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.10-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.10-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.9-2+deb11u7"}]}],"versions":["2.2.9-2","2.2.9-2+deb11u1","2.2.9-2+deb11u1~bpo10+1","2.2.9-2+deb11u2","2.2.9-2+deb11u2~bpo10+1","2.2.9-2+deb11u3","2.2.9-2+deb11u3~bpo10+1","2.2.9-2+deb11u4","2.2.9-2+deb11u5","2.2.9-2+deb11u6"]},{"source":"osv","ecosystem":"Mageia:9","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.14-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.16-9.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-16.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-16.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-9.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-9.oe2403sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.11+git0.01c1056a4-150600.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.11+git0.01c1056a4-150600.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.22+git0.f8e3218e2-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.22+git0.f8e3218e2-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.22+git0.f8e3218e2-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.22+git0.f8e3218e2-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP5","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.22+git0.f8e3218e2-150400.3.22.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.24-0ubuntu0.22.04.2"}]}],"versions":["2.2.9-2ubuntu2","2.4.8-1","2.4.8-2ubuntu3","2.4.11-1ubuntu1","2.4.12-1ubuntu1","2.4.12-1ubuntu2","2.4.13-1ubuntu1","2.4.14-1ubuntu1","2.4.18-0ubuntu1","2.4.18-0ubuntu1.1","2.4.18-0ubuntu1.2","2.4.18-0ubuntu1.3","2.4.22-0ubuntu0.22.04.1","2.4.22-0ubuntu0.22.04.2","2.4.22-0ubuntu0.22.04.3","2.4.24-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-1ubuntu3.3"}]}],"versions":["2.6.15-1ubuntu2","2.8.5-1ubuntu1","2.8.5-1ubuntu2","2.8.5-1ubuntu3","2.8.5-1ubuntu3.1","2.8.5-1ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.24-0ubuntu0.22.04.2"}]}],"versions":["2.2.9-2ubuntu2","2.4.8-1","2.4.8-2ubuntu3","2.4.11-1ubuntu1","2.4.12-1ubuntu1","2.4.12-1ubuntu2","2.4.13-1ubuntu1","2.4.14-1ubuntu1","2.4.18-0ubuntu1","2.4.18-0ubuntu1.1","2.4.18-0ubuntu1.2","2.4.18-0ubuntu1.3","2.4.22-0ubuntu0.22.04.1","2.4.22-0ubuntu0.22.04.2","2.4.22-0ubuntu0.22.04.3","2.4.24-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-1ubuntu3.3"}]}],"versions":["2.6.15-1ubuntu2","2.8.5-1ubuntu1","2.8.5-1ubuntu2","2.8.5-1ubuntu3","2.8.5-1ubuntu3.1","2.8.5-1ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:25.04","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-1ubuntu1.1"}]}],"versions":["2.9.10-1ubuntu1","3.0.7-1ubuntu1","3.0.8-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0+git0.e134140d2-2.1"}]}]}],"products":[{"vendor":"haproxy","product":"haproxy"}],"references":[{"url":"https://github.com/haproxy/haproxy/commit/3e3b9eebf871510aee36c3a3336faac2f38c9559","tags":["web","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00031.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32464","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-frg5-h47x-75j9"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32464.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-32464","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0138.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34186","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7431-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QIY5CFNUWQY6R6BCFXJMFVWXB3WVUQRS/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1495","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251264-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240971","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32464","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251338-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-32464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32464","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7431-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-32464","description":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.","status":"published","published":"2025-04-09T00:00:00Z","modified":"2025-04-23T22:03:08.605Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-1025"],"updated_at":"2026-11-02T14:32:46.109993Z"}],"euvd":[{"id":"EUVD-2025-10415","description":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.","status":"published","published":"2025-04-09T00:00:00Z","modified":"2025-04-23T22:03:08Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:52:05.311873Z"}],"ghsa":[{"id":"GHSA-frg5-h47x-75j9","title":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap...","description":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.","status":"published","published":"2025-04-09T04:18:20Z","modified":"2025-04-24T00:31:19Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-1025"],"updated_at":"2026-11-02T15:02:00.72042Z"}],"nvd":[{"id":"CVE-2025-32464","description":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.","status":"published","published":"2025-04-09T03:15:16.847Z","modified":"2026-06-17T09:12:02.28Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-1025"],"updated_at":"2026-11-02T14:11:00.087098Z"}],"osv":[{"id":"CVE-2025-32464","description":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.","status":"published","published":"2025-04-09T00:00:00Z","modified":"2026-10-28T10:59:07.30623991Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-1025"],"updated_at":"2026-11-02T15:44:48.02508Z"},{"id":"DEBIAN-CVE-2025-32464","description":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.","status":"published","published":"2025-04-09T03:15:16.847Z","modified":"2026-09-01T20:05:45.967250993Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-1495","title":"haproxy security update","description":"HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world\u0026amp;apos;s most visited ones.\r\n\r\nSecurity Fix(es):\n\nHAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.(CVE-2025-32464)","status":"published","published":"2025-05-09T11:08:35Z","modified":"2026-08-18T01:17:57.763323439Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2025-32464","description":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.","status":"published","published":"2025-04-09T03:15:00Z","modified":"2026-02-04T02:44:59.889808Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"AZL-59712","title":"CVE-2025-32464 affecting package haproxy for versions less than 2.9.11-3","description":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.","status":"published","published":"2025-04-09T03:15:16Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"BIT-haproxy-2025-32464","description":"HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.","status":"published","published":"2025-04-11T19:12:38.4Z","modified":"2025-07-02T06:33:01.619Z","updated_at":"2026-11-02T15:28:31.02759Z"},{"id":"DLA-4135-1","title":"haproxy - security update","status":"published","published":"2025-04-23T00:00:00Z","modified":"2026-03-09T01:22:00.462734Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0138","title":"Updated haproxy packages fix security vulnerability","description":"BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex\nback-refsAleandro Prudenzano of Doyensec and Edoardo Geraci of Codean\nLabs reported a bug in sample_conv_regsub(), which can cause\nreplacements of multiple back-references to overflow the temporary trash\nbuffer. The problem happens when doing \"regsub(match,replacement,g)\":\nwe're replacing every occurrence of \"match\" with \"replacement\" in the\ninput sample, which requires a length check. For this, a max is applied,\nso that a replacement may not use more than the remaining length in the\nbuffer. However, the length check is made on the replaced pattern and\nnot on the temporary buffer used to carry the new string. This results\nin the remaining size to be usable for each input match, which can go\nbeyond the temporary buffer size if more than one occurrence has to be\nreplaced with something that's larger than the remaining room.\n","status":"published","published":"2025-04-25T17:34:34Z","modified":"2026-04-16T04:41:21.728310863Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15200-1","title":"haproxy-3.2.0+git0.e134140d2-2.1 on GA media","description":"These are all security issues fixed in the haproxy-3.2.0+git0.e134140d2-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-06-04T00:00:00Z","modified":"2026-03-23T04:53:29.303756Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:1264-1","title":"Security update for haproxy","description":"This update for haproxy fixes the following issues:\n\n- CVE-2025-32464: Fixed heap-based buffer overflow in sample_conv_regsub. (bsc#1240971)\n","status":"published","published":"2025-04-15T08:23:40Z","modified":"2026-02-04T02:14:21.317826Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1338-1","title":"Security update for haproxy","description":"This update for haproxy fixes the following issues:\n\n- CVE-2025-32464: Fixed heap-based buffer overflow in sample_conv_regsub. (bsc#1240971)\n","status":"published","published":"2025-04-17T11:02:33Z","modified":"2026-02-04T03:46:57.570686Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-7431-1","title":"haproxy vulnerability","description":"Aleandro Prudenzano and Edoardo Geraci discovered that HAProxy incorrectly\nhandled certain uncommon configurations that replace multiple short\npatterns with a longer one. A remote attacker could use this issue to cause\nHAProxy to crash, resulting in a denial of service, or possibly execute\narbitrary code.\n","status":"published","published":"2025-04-10T12:08:38Z","modified":"2026-02-10T04:47:48Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7431-2","title":"haproxy vulnerability","description":"USN-7431-1 fixed a vulnerability in HAProxy. This update provides the\ncorresponding update for Ubuntu 25.04.\n\nOriginal advisory details:\n\n Aleandro Prudenzano and Edoardo Geraci discovered that HAProxy incorrectly\n handled certain uncommon configurations that replace multiple short\n patterns with a longer one. A remote attacker could use this issue to\n cause HAProxy to crash, resulting in a denial of service, or possibly\n execute arbitrary code.\n","status":"published","published":"2025-04-23T11:45:29.557408Z","modified":"2026-02-04T03:20:49.833761Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}