GCVE - cpe:2.3:a:n/a:haproxy:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:haproxy:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Haproxy (`a87c67be-6143-5383-9f43-5afebddb8031`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-0836`	vulnerable	2026-06-08 05:52:32.920216	Details available An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to configured FastCGI backends in an unexpected way. Published: 2023-03-29T00:00:00.000Z Updated: 2025-02-18T16:42:03.756Z Open on db.gcve.eu Reference links https://git.haproxy.org/?p=haproxy.git%3Ba=commitdiff%3Bh=2e6bf0a https://www.debian.org/security/2023/dsa-5388	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0056`	vulnerable	2026-06-08 05:52:04.178081	Details available An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability. Published: 2023-03-23T00:00:00.000Z Updated: 2025-02-25T19:35:27.521Z Open on db.gcve.eu Reference links https://access.redhat.com/security/cve/CVE-2023-0056	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-0711`	vulnerable	2026-06-08 05:39:10.588074	Details available A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability. Published: 2022-03-02T21:59:03.000Z Updated: 2024-08-02T23:40:03.518Z Open on db.gcve.eu Reference links https://access.redhat.com/security/cve/cve-2022-0711 https://www.mail-archive.com/haproxy%40formilux.org/msg41833.html https://github.com/haproxy/haproxy/commit/bfb15ab34ead85f64cd6da0e9fb418c9cd14cee8 https://www.debian.org/security/2022/dsa-5102	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.