Known vulnerabilities in haproxy (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
haproxy (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:haproxy_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
19
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.0.12-0ubuntu0.25.10.3
3.0.10-1ubuntu3
2.4.24-0ubuntu0.22.04.3
2.8.5-1ubuntu3.4
3.0.8-1ubuntu1.2
2.4.2-2ppa1~bionic
3.0.9-1
3.0.10-1
3.0.8-1
3.0.8-1ubuntu1
2.9.11-1
2.9.12-1
3.0.0-1
3.0.1-1
3.0.2-1
3.0.3-1
3.0.4-1
3.0.5-1
3.0.6-1
3.0.6-2
3.0.6-3
3.0.7-1
3.0.7-1ubuntu1
2.9.10-1
2.9.10-1ubuntu1
2.9.9-1ubuntu2
2.8.5-2
2.9.0-1
2.9.1-1
2.9.2-1
2.9.3-1
2.9.4-1
2.9.5-1
2.9.6-1
2.9.7-1
2.9.8-1
2.9.9-1
2.9.9-1ubuntu1
2.8.5-1ubuntu3
2.8.5-1ubuntu3.1
2.8.5-1ubuntu2
2.7.0-1
2.7.1-1
2.7.2-1
2.7.2-2
2.7.3-1
2.7.4-1
2.7.5-1
2.7.6-1
2.7.7-1
2.7.8-1
2.8.0-1
2.8.1-1
2.8.2-1
2.8.3-1
2.8.4-1
2.8.4-2
2.8.5-1
2.8.5-1ubuntu1
2.6.15-1ubuntu2
2.6.15-1
2.6.15-1ubuntu1
2.6.14-1
2.6.14-1ubuntu1
2.6.10-1
2.6.11-1
2.6.12-1
2.6.13-1
2.6.13-1ubuntu1
2.6.8-1
2.6.8-2
2.6.9-1
2.6.9-1ubuntu1
2.6.7-1ubuntu2
2.4.19-1
2.5.0-1
2.5.1-1
2.5.2-1
2.5.3-1
2.5.4-1
2.5.5-1
2.5.6-1
2.5.7-1
2.6.0-1
2.6.1-1
2.6.2-1
2.6.3-1
2.6.4-1
2.6.5-1
2.6.6-1
2.6.6-2
2.6.7-1
2.6.7-1ubuntu1
2.4.24-0ubuntu0.22.04.1
2.4.22-0ubuntu0.22.10.1
2.4.22-0ubuntu0.22.04.1
2.4.18-1
2.4.18-1ubuntu1
2.4.18-0ubuntu1
2.4.17-1ubuntu2
2.4.15-1
2.4.16-1
2.4.17-1
2.4.17-1ubuntu1
2.4.14-1
2.4.14-1ubuntu1
2.4.13-1
2.4.13-1ubuntu1
2.4.12-1ubuntu2
2.4.12-1
2.4.12-1ubuntu1
2.4.8-3
2.4.9-1
2.4.10-1
2.4.11-1
2.4.11-1ubuntu1
2.4.8-2ubuntu3
2.4.8-2ubuntu2
2.4.8-2ubuntu1
2.4.8-2
2.2.10-1
2.2.11-1
2.2.12-1
2.2.13-1
2.2.14-1
2.2.15-1
2.2.16-1
2.2.16-2
2.2.16-3
2.2.17-1
2.3.0-1
2.3.1-1
2.3.2-1
2.3.3-1
2.3.4-1
2.3.5-1
2.3.6-1
2.3.7-1
2.3.8-1
2.3.9-1
2.3.10-1
2.4.0-1
2.4.1-1
2.4.2-1
2.4.2-2
2.4.3-1
2.4.3-2
2.4.4-1
2.4.7-1
2.4.7-2
2.4.8-1
2.2.9-2ubuntu2
2.2.9-2ubuntu1
2.2.9-2
2.2.9-1build1
2.2.9-1
2.2.8-1
2.2.7-1
2.2.6-2
2.2.6-1
2.0.18-1
2.0.19-1
2.2.4-1
2.2.5-1
2.2.5-2
2.2.3-2
2.2.3-1
2.1.0-1
2.1.0-2
2.1.1-1
2.1.2-1
2.1.3-1
2.1.3-2
2.1.3-3
2.1.4-1
2.1.5-1
2.1.7-1
2.2.0-1
2.2.1-1
2.2.2-1
2.0.33-0ubuntu0.1
2.0.31-0ubuntu0.1
2.0.29-0ubuntu1
2.0.17-1
2.0.16-1
2.0.15-1
2.0.13-2ubuntu0.1
3.0.10-1ubuntu1
3.0.8-1ubuntu1.1
2.4.24-0ubuntu0.22.04.2
2.8.5-1ubuntu3.3
2.9.10-1ubuntu1.2
2.8.5-1ubuntu3.2
Ubuntu Pro
2.0.31-0ubuntu0.3
2.4.22-0ubuntu0.22.04.3
2.6.9-1ubuntu1.2
2.0.31-0ubuntu0.2
2.4.22-0ubuntu0.22.04.2
2.6.9-1ubuntu1.1
2.4.18-0ubuntu1.3
2.4.18-1ubuntu1.3
1.8.8-1ubuntu0.13
2.0.29-0ubuntu1.3
2.4.18-0ubuntu1.2
2.4.18-1ubuntu1.2
2.0.29-0ubuntu1.1
2.4.18-0ubuntu1.1
2.4.18-1ubuntu1.1
2.0.13-2ubuntu0.5
2.2.9-2ubuntu2.1
2.0.13-2ubuntu0.3
2.2.9-1ubuntu0.2
2.0.13-2ubuntu0.2
2.2.9-1ubuntu0.1
1.8.8-1ubuntu0.11
2.0.14
2.0.14-1
2.0.13
2.0.5
1.8.8
1.6.3
1.5.14
1.4.24
1.4.18
1.4.18-0ubuntu1
1.4.18-0ubuntu1.2
2.0.13-1ubuntu1
2.0.13-2
2.0.5-1ubuntu0.4
1.8.8-1ubuntu0.10
2.0.13-1
2.0.13-1ubuntu2
2.0.12-1
2.0.12-1ubuntu1
2.0.12-1ubuntu2
2.0.11-1
2.0.11-1ubuntu1
2.0.10-1ubuntu1
2.0.5-1ubuntu0.3
1.8.19-1ubuntu1.3
1.8.8-1ubuntu0.9
2.0.10-1
2.0.9-1
1.8.8-1ubuntu0.8
2.0.5-1ubuntu0.2
1.8.19-1ubuntu1.2
1.8.8-1ubuntu0.7
1.6.3-1ubuntu0.3
2.0.6-1
2.0.6-2
2.0.7-1
2.0.8-1
2.0.5-1ubuntu0.1
1.8.8-1ubuntu0.5
1.8.19-1ubuntu1.1
1.8.8-1ubuntu0.6
2.0.4-1
2.0.2-1
2.0.3-1
2.0.3-1ubuntu1
2.0.1-1ubuntu2
2.0.5-1
1.9.0-1
1.9.0-2
1.9.2-1
1.9.3-1
1.9.4-1
1.9.5-1
1.9.6-1
1.9.7-1
1.9.8-1
2.0.0-1
2.0.1-1
2.0.1-1ubuntu1
1.8.18-1
1.8.19-1
1.8.19-1ubuntu1
1.8.13-2ubuntu0.2
1.8.8-1ubuntu0.4
1.8.17-1ubuntu1
1.8.17-1
1.8.13-2ubuntu0.1
1.8.8-1ubuntu0.3
1.6.3-1ubuntu0.2
1.8.16-2
1.8.16-1
1.8.15-1
1.8.14-1
1.8.13-2build1
1.8.13-2
1.8.13-1
1.8.12-1
1.8.11-1
1.8.10-1
1.8.9-2
1.8.9-1
1.8.8-1ubuntu0.2
1.8.8-1ubuntu0.1
1.8.8-1
1.7.10-1
1.8.5-1
1.8.6-1
1.8.7-1
1.8.0-1
1.8.0-2
1.8.1-1
1.8.2-1
1.8.3-1
1.8.4-1
1.7.9-1ubuntu2
1.7.9-1ubuntu1
1.7.9-1
1.7~dev6-1
1.6~dev3-1
1.6~dev4-1
1.6~dev5-1
1.6~dev7-1
1.6.0+ds1-1
1.5.14-1ubuntu0.15.10.1~ubuntu14.04.1
1.5.4-1ubuntu2.1~ubuntu14.04.1
1.5~dev18-1
1.5~dev19-1
1.5~dev19-2
1.5~dev21-1
1.5~dev21+20140118-1
1.5~dev22-1
1.5~dev23-1
1.5~dev24-1
1.5~dev24-2
1.5~dev25-1
1.5~dev26-1
1.5~dev26-2
1.4.24-2ubuntu0.5
1.3.15.2-2~lenny1
1.7.8-1
1.7.7-1
1.7.6-1
1.7.5-2
1.7.3-1
1.7.4-1
1.7.5-1
1.7.2-1
1.7.0-1
1.7.1-1
1.6.3-1ubuntu0.1
1.6.2-2ubuntu3
1.6.2-2ubuntu2
1.6.2-2ubuntu1
1.6.1-1
1.6.1-2
1.6.2-1
1.6.2-2
1.6.3-1
1.6.4-1
1.6.4-2
1.6.4-3
1.6.5-1
1.6.5-2
1.6.6-1
1.6.7-1
1.6.8-1
1.6.9-1
1.6.9-2
1.6.10-1
1.5.4-1ubuntu1
1.5.4-1ubuntu2
1.5.4-1ubuntu2.1
1.5.15-1
1.5.14-1ubuntu0.15.10.1
1.5.14-1
1.5.13-1
1.5.8-2
1.5.8-3
1.5.11-1
1.5.11-2
1.5.12-1
1.5.10-1ubuntu0.2
1.5.10-1ubuntu0.1
1.4.25-1
1.5.0-1
1.5.1-1
1.5.2-1
1.5.3-1
1.5.4-1
1.5.5-1
1.5.6-1
1.5.8-1
1.5.9-1
1.5.10-1
1.4.24-2ubuntu0.4
1.4.24-2ubuntu0.3
1.4.24-2ubuntu0.2
1.3.12.dfsg-1
1.3.12.dfsg2-1
1.3.14.1-1
1.3.14.2-1
1.3.14.2-2
1.3.14.2-3
1.3.14.3-1
1.3.14.5-1
1.3.15.1-1
1.3.15.2-1
1.3.15.2-2
1.3.15.7-1
1.3.15.7-2
1.3.18-1
1.3.21-1
1.3.22-1
1.4.2-1
1.4.4-1
1.4.8-1
1.4.13-1
1.4.15-1
1.4.23-1
1.4.24-1
1.4.24-2
1.4.24-2ubuntu0.1
Vulnerabilities (19)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU122782 - Integer underflow CVE-2026-26081 |
CWE-191 | Medium | 3.0.12-0ubuntu0.25.10.3 | 12.02.2026 |
SB2026021269 SB2026021273 SB2026021280 and 2 more |
||
| #VU116636 - Improper input validation CVE-2025-11230 |
CWE-20 | Medium | 2.4.24-0ubuntu0.22.04.3, 2.8.5-1ubuntu3.4, 3.0.8-1ubuntu1.2 | 06.10.2025 |
SB2025100656 SB2025100661 SB2025100663 and 19 more |
||
| #VU107589 - Heap-based Buffer Overflow CVE-2025-32464 |
CWE-122 | Low | 2.4.24-0ubuntu0.22.04.2, 2.8.5-1ubuntu3.3, 2.9.10-1ubuntu1.2, 3.0.8-1ubuntu1.1 | 17.04.2025 |
SB2025041738 SB2025041740 SB2025041741 and 4 more |
||
| #VU100972 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-53008 |
CWE-444 | Medium | 2.8.5-1ubuntu3.2 | 27.11.2024 |
SB2024112706 SB2024120348 SB2024121347 and 4 more |
||
| #VU83902 - Improper input validation CVE-2023-45539 |
CWE-20 | Medium | Ubuntu Pro, 2.0.31-0ubuntu0.3, 2.4.22-0ubuntu0.22.04.3, 2.6.9-1ubuntu1.2 | 06.12.2023 |
SB2023082120 SB2023120617 SB2023120620 and 21 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | Ubuntu Pro | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU79767 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40225 |
CWE-444 | Medium | 2.0.31-0ubuntu0.2, 2.4.22-0ubuntu0.22.04.2, 2.6.9-1ubuntu1.1 | 21.08.2023 |
SB2023082120 SB2023082121 SB2023082122 and 17 more |
||
| #VU74299 - Missing release of memory after effective lifetime CVE-2023-0836 |
CWE-401 | Low | 2.4.18-0ubuntu1.3, 2.4.18-1ubuntu1.3 | 03.04.2023 |
SB2023033109 SB2023040342 SB2023041402 and 7 more |
||
| #VU72334 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-25725 |
CWE-444 | Medium | Ubuntu Pro, 1.8.8-1ubuntu0.13, 2.0.29-0ubuntu1.3, 2.4.18-0ubuntu1.2, 2.4.18-1ubuntu1.2 | 16.02.2023 |
SB2023021659 SB2023021662 SB2023021663 and 22 more |
||
| #VU71431 - Improper input validation CVE-2023-0056 |
CWE-20 | Medium | 2.0.29-0ubuntu1.1, 2.4.18-0ubuntu1.1, 2.4.18-1ubuntu1.1 | 23.01.2023 |
SB2023012331 SB2023012332 SB2023012641 and 20 more |
||
| #VU61291 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0711 |
CWE-835 | Medium | 2.0.13-2ubuntu0.5, 2.2.9-2ubuntu2.1 | 14.03.2022 |
SB2022031420 SB2022031505 SB2022032910 and 8 more |
||
| #VU56401 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-40346 |
CWE-444 | Medium | 2.0.13-2ubuntu0.3, 2.2.9-1ubuntu0.2 | 08.09.2021 |
SB2021090813 SB2021090814 SB2021111101 and 11 more |
||
| #VU26549 - Heap-based Buffer Overflow CVE-2020-11100 |
CWE-122 | High | 1.8.8-1ubuntu0.10, 2.0.5-1ubuntu0.4 | 02.04.2020 |
SB2020040219 SB2020040220 SB2020040221 and 13 more |
||
| #VU23084 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2019-19330 |
CWE-93 | Medium | 1.8.8-1ubuntu0.9, 1.8.19-1ubuntu1.3, 2.0.5-1ubuntu0.3 | 28.11.2019 |
SB2019112812 SB2019112813 SB2019120422 and 7 more |
||
| #VU22597 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2019-18277 |
CWE-444 | Medium | 1.6.3-1ubuntu0.3, 1.8.8-1ubuntu0.7, 1.8.19-1ubuntu1.2, 2.0.5-1ubuntu0.2 | 07.11.2019 |
SB2019110721 SB2019110722 SB2019120408 and 6 more |
||
| #VU17107 - Out-of-bounds read CVE-2018-20615 |
CWE-125 | Medium | 1.6.3-1ubuntu0.2, 1.8.8-1ubuntu0.3, 1.8.13-2ubuntu0.1 | 22.01.2019 |
SB2019012202 SB2019011509 SB2019021406 and 3 more |
||
| #VU16548 - Out-of-bounds read CVE-2018-20102 |
CWE-125 | Low | 1.6.3-1ubuntu0.2, 1.8.8-1ubuntu0.3, 1.8.13-2ubuntu0.1 | 14.12.2018 |
SB2018121409 SB2019011302 SB2019011509 and 4 more |
||
| #VU16547 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-20103 |
CWE-835 | Low | 1.6.3-1ubuntu0.2, 1.8.8-1ubuntu0.3, 1.8.13-2ubuntu0.1 | 14.12.2018 |
SB2018121409 SB2019011302 SB2019011509 and 4 more |
||
| #VU9506 - Improper Authentication CVE-2017-14189 |
CWE-287 | High | Ubuntu Pro | 29.11.2017 |
SB2017120108 SB2024072336 |