Information on source package haproxy

Available versions

ReleaseVersion
jessie1.5.8-3+deb8u2
jessie (security)1.5.8-3+deb8u1
stretch1.7.5-2
buster1.8.19-1
bullseye2.0.5-1
sid2.0.5-1

Open issues

BugjessiestretchbusterbullseyesidDescription
TEMP-0000000-B9CD89vulnerable (no DSA)fixedfixedfixedfixedBUG/MAJOR: http: prevent risk of reading past end with balance url_param
TEMP-0000000-1F321Dvulnerable (no DSA)fixedfixedfixedfixedBUG/MAJOR: http: don't read past buffer's end in http_replace_value
CVE-2018-20103fixedvulnerable (no DSA)fixedfixedfixedAn issue was discovered in dns.c in HAProxy through 1.8.14. In the cas ...
CVE-2018-20102fixedvulnerable (no DSA)fixedfixedfixedAn out-of-bounds read in dns_validate_dns_response in dns.c was discov ...

Resolved issues

BugDescription
CVE-2019-14241HAProxy through 2.0.2 allows attackers to cause a denial of service (h ...
CVE-2019-11323HAProxy before 1.9.7 mishandles a reload with rotated keys, which trig ...
CVE-2018-20615An out-of-bounds read issue was discovered in the HTTP/2 protocol deco ...
CVE-2018-14645A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, ...
CVE-2018-11469Incorrect caching of responses to requests including an Authorization ...
CVE-2018-10184An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame ...
CVE-2016-5360HAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, all ...
CVE-2015-3281The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1. ...
CVE-2014-6269Multiple integer overflows in the http_request_forward_body function i ...
CVE-2013-2175HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to ...
CVE-2013-1912Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5- ...
CVE-2012-2942Buffer overflow in the trash buffer in the header capture functionalit ...

Security announcements

DSA / DLADescription
DSA-3301-1haproxy - security update
DSA-2711-1haproxy - several

Search for package or bug name: Reporting problems