Known vulnerabilities in haproxy-debugsource

Vendor: openEuler
Software: haproxy-debugsource
Software CPE: cpe:2.3:o:openeuler:haproxy-debugsource:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 19
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting haproxy-debugsource haproxy-debugsource is affected by 19 known vulnerabilities: 1 high, 16 medium, 2 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126147 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33555		 CWE-444 Medium
No
No
 2.6.6-19, 2.9.5-13, 3.0.11-2 15.04.2026 SB2026041575
SB2026042424
SB2026042510
and 7 more
#VU122782 - Integer underflow
CVE-2026-26081		 CWE-191 Medium
No
No
 3.0.11-4 12.02.2026 SB2026021269
SB2026021273
SB2026021280
and 2 more
#VU116636 - Improper input validation
CVE-2025-11230		 CWE-20 Medium
No
No
 2.6.6-18, 2.9.5-12 06.10.2025 SB2025100656
SB2025100661
SB2025100663
and 19 more
#VU107589 - Heap-based Buffer Overflow
CVE-2025-32464		 CWE-122 Low
No
No
 2.2.16-9 17.04.2025 SB2025041738
SB2025041740
SB2025041741
and 4 more
#VU100972 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-53008		 CWE-444 Medium
No
No
 2.6.6-14, 2.9.5-7 27.11.2024 SB2024112706
SB2024120348
SB2024121347
and 4 more
#VU98829 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-49214		 CWE-451 Medium
No
No
 2.9.5-5 21.10.2024 SB2024102105
SB2024102116
#VU96822 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-45506		 CWE-835 Medium
No
No
 2.9.5-4 05.09.2024 SB2024090507
SB2024090508
SB2024090509
and 1 more
#VU83902 - Improper input validation
CVE-2023-45539		 CWE-20 Medium
No
No
 2.2.16-7, 2.6.6-8 06.12.2023 SB2023082120
SB2023120617
SB2023120620
and 21 more
#VU79767 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40225		 CWE-444 Medium
No
No
 2.2.16-5 21.08.2023 SB2023082120
SB2023082121
SB2023082122
and 17 more
#VU74299 - Missing release of memory after effective lifetime
CVE-2023-0836		 CWE-401 Low
No
No
 2.2.16-7, 2.6.6-8 03.04.2023 SB2023033109
SB2023040342
SB2023041402
and 7 more
#VU74224 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-25950		 CWE-444 Medium
Available
No
 2.6.6-3 31.03.2023 SB2023033109
SB2023042660
#VU72334 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-25725		 CWE-444 Medium
No
No
 2.2.16-4 16.02.2023 SB2023021659
SB2023021662
SB2023021663
and 22 more
#VU71431 - Improper input validation
CVE-2023-0056		 CWE-20 Medium
No
No
 2.2.16-4 23.01.2023 SB2023012331
SB2023012332
SB2023012641
and 20 more
#VU61291 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0711		 CWE-835 Medium
No
No
 2.2.16-3, 2.4.8-2 14.03.2022 SB2022031420
SB2022031505
SB2022032910
and 8 more
#VU56401 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-40346		 CWE-444 Medium
Available
No
 2.2.16-2 08.09.2021 SB2021090813
SB2021090814
SB2021111101
and 11 more
#VU55971 - Improper input validation
CVE-2021-39242		 CWE-20 Medium
No
No
 2.2.16-1 18.08.2021 SB2021081816
SB2021081819
SB2021111101
and 4 more
#VU55970 - Improper input validation
CVE-2021-39241		 CWE-20 Medium
No
No
 2.2.16-1 18.08.2021 SB2021081816
SB2021081819
SB2021111101
and 7 more
#VU55969 - Improper input validation
CVE-2021-39240		 CWE-20 Medium
No
No
 2.2.16-1 18.08.2021 SB2021081816
SB2021081819
SB2021111101
and 4 more
#VU26549 - Heap-based Buffer Overflow
CVE-2020-11100		 CWE-122 High
No
No
 1.8.14-5 02.04.2020 SB2020040219
SB2020040220
SB2020040221
and 13 more