[CVE-2026-110353 ] Published: Oct 22, 2026, 2:53:33 AM UTC
haproxy: CVE-2026-110353
High(7.5) Affected Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Affected
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
[CVE-2026-110354 ] Published: Oct 22, 2026, 2:46:38 AM UTC
haproxy: CVE-2026-110354
High(7.5) Affected Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Affected · Fixed: 2.6.12-1+deb12u4
dsa · haproxy · debian · 12; dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Affected · Fixed: 2.6.12-1+deb12u4
dsa · haproxy · debian · 12; dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Affected · Fixed: 2.6.12-1+deb12u4
dsa · haproxy · debian · 12; dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Affected · Fixed: 2.6.12-1+deb12u4
dsa · haproxy · debian · 12; dsa · haproxy · debian · bookworm
[CVE-2026-55204 ] Published: Jun 18, 2026, 4:05:52 PM UTC
HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_def
High(8.7) Affected Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Affected
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
[CVE-2026-55203 ] Published: Jun 18, 2026, 4:05:20 PM UTC
HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLe
Critical(9) Affected Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Affected
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
[CVE-2026-33555 ] Published: Apr 13, 2026, 12:00:00 AM UTC
An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with
Medium(4) Affected Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Affected · Fixed: 2.6.12-1+deb12u4
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected · Fixed: 2.6.12-1+deb12u4
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected · Fixed: 2.6.12-1+deb12u4
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected · Fixed: 2.6.12-1+deb12u4
nvd · haproxy · debian · bookworm; nvd · haproxy · debian · 12
[CVE-2024-53008 ] Published: Nov 27, 2024, 11:00:00 PM UTC
HAProxy vulnerability
Medium(6.5) Affected Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Affected
usn · haproxy · debian · bookworm; usn · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
usn · haproxy · debian · bookworm; usn · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
usn · haproxy · debian · bookworm; usn · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
usn · haproxy · debian · bookworm; usn · haproxy · debian · 12
[CVE-2024-49214 ] Published: Oct 13, 2024, 10:00:00 PM UTC
haproxy: CVE-2024-49214
Medium(5.3) Affected Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Affected
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Affected
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
[CVE-2023-0056 ] Published: Jan 15, 2023, 11:00:00 PM UTC
haproxy: CVE-2023-0056
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 7:24:01 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
[CVE-2023-0836 ] Published: Jan 1, 2023, 12:00:00 AM UTC
haproxy: CVE-2023-0836
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 7:24:38 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.6.8-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
[CVE-2022-0711 ] Published: Mar 2, 2022, 12:00:00 AM UTC
haproxy: CVE-2022-0711
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:21:30 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.4.13-1
dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.4.13-1
dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.4.13-1
dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.4.13-1
dsa · haproxy · debian · bookworm
[CVE-2021-40346 ] Published: Sep 7, 2021, 12:00:00 AM UTC
haproxy: CVE-2021-40346
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:02:24 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-3
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-3
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-3
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-3
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
[CVE-2021-39242 ] Published: Aug 17, 2021, 7:15:08 PM UTC
haproxy: CVE-2021-39242
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:01:57 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
[CVE-2021-39241 ] Published: Aug 17, 2021, 7:15:00 PM UTC
haproxy: CVE-2021-39241
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:01:56 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
[CVE-2021-39240 ] Published: Aug 17, 2021, 12:00:00 AM UTC
haproxy: CVE-2021-39240
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:01:56 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.2.16-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
[CVE-2020-11100 ] Published: Apr 2, 2020, 12:00:00 AM UTC
haproxy: CVE-2020-11100
High(8.8) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:46:51 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.13-2
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.13-2
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.13-2
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.13-2
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
[CVE-2019-19330 ] Published: Nov 25, 2019, 12:00:00 AM UTC
haproxy: CVE-2019-19330
Medium(5.9) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:42:53 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.10-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.10-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.10-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.10-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
[CVE-2019-14241 ] Published: Nov 18, 2019, 4:10:13 PM UTC
haproxy: CVE-2019-14241
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:40:04 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Not affected
dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Not affected
dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Not affected
dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Not affected
dsa · haproxy · debian · bookworm
[CVE-2019-18277 ] Published: Sep 13, 2019, 12:00:00 AM UTC
haproxy: CVE-2019-18277
Medium(6.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:41:58 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.6-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.6-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.6-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 2.0.6-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
[CVE-2019-11323 ] Published: Apr 14, 2019, 12:00:00 AM UTC
haproxy: CVE-2019-11323
Medium(5.9) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:38:41 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Not affected
dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Not affected
dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Not affected
dsa · haproxy · debian · bookworm
2.6.12-1+deb12u3 · all · bookworm-security
Not affected
dsa · haproxy · debian · bookworm
[CVE-2018-20102 ] Published: Dec 12, 2018, 12:00:00 AM UTC
haproxy: CVE-2018-20102
Medium(6.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:35:56 PM UTC
Details (4) 2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 1.8.15-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 1.8.15-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 1.8.15-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
2.6.12-1+deb12u3 · all · bookworm-security
Fixed · Fixed: 1.8.15-1
dsa · haproxy · debian · bookworm; dsa · haproxy · debian · 12
