Approved changes feed: RSS · Atom

cpe:2.3:a:haproxy:haproxy:3.1:dev3:*:*:*:*:*:*

part: a version: 3.1 update: dev3

VendorHaproxy (bcdccbbb-bab3-5a27-b98b-5345a425d85c)
ProductHaproxy (0acaea08-d114-576a-98cc-ac99b15c19b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/haproxy purl2cpe 2026-06-01 10:18:18.560339
pkg:deb/ubuntu/haproxy purl2cpe 2026-06-01 10:18:18.560340
pkg:docker/haproxy/haproxy purl2cpe 2026-06-01 10:18:18.560342
pkg:github/haproxy/haproxy purl2cpe 2026-06-01 10:18:18.560343
pkg:haproxy/haproxy purl2cpe 2026-06-01 10:18:18.560344
pkg:rpm/fedora/haproxy purl2cpe 2026-06-01 10:18:18.560346
pkg:rpm/opensuse/haproxy purl2cpe 2026-06-01 10:18:18.560347

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45506 vulnerable 2026-06-08 06:48:06.406853 Details available
HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding (h2_send loop) under a certain set of conditions, as exploited in the wild in 2024.
Published: 2024-09-04T00:00:00.000Z
Updated: 2025-03-14T19:16:38.990Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.