Known vulnerabilities in haproxy

Known vulnerabilities in haproxy

Vendor: openEuler

Software: haproxy

Software CPE: cpe:2.3:o:openeuler:haproxy:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 19

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU126147 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-33555	CWE-444	Medium	No	No	2.6.6-19, 2.9.5-13, 3.0.11-2	15.04.2026	SB2026041575 SB2026042424 SB2026042510 and 7 more
#VU122782 - Integer underflow CVE-2026-26081	CWE-191	Medium	No	No	3.0.11-4	12.02.2026	SB2026021269 SB2026021273 SB2026021280 and 2 more
#VU116636 - Improper input validation CVE-2025-11230	CWE-20	Medium	No	No	2.6.6-18, 2.9.5-12	06.10.2025	SB2025100656 SB2025100661 SB2025100663 and 19 more
#VU107589 - Heap-based Buffer Overflow CVE-2025-32464	CWE-122	Low	No	No	2.2.16-9	17.04.2025	SB2025041738 SB2025041740 SB2025041741 and 4 more
#VU100972 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-53008	CWE-444	Medium	No	No	2.6.6-14, 2.9.5-7	27.11.2024	SB2024112706 SB2024120348 SB2024121347 and 4 more
#VU98829 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2024-49214	CWE-451	Medium	No	No	2.9.5-5	21.10.2024	SB2024102105 SB2024102116
#VU96822 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-45506	CWE-835	Medium	No	No	2.9.5-4	05.09.2024	SB2024090507 SB2024090508 SB2024090509 and 1 more
#VU83902 - Improper input validation CVE-2023-45539	CWE-20	Medium	No	No	2.2.16-7, 2.6.6-8	06.12.2023	SB2023082120 SB2023120617 SB2023120620 and 21 more
#VU79767 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40225	CWE-444	Medium	No	No	2.2.16-5	21.08.2023	SB2023082120 SB2023082121 SB2023082122 and 17 more
#VU74299 - Missing release of memory after effective lifetime CVE-2023-0836	CWE-401	Low	No	No	2.2.16-7, 2.6.6-8	03.04.2023	SB2023033109 SB2023040342 SB2023041402 and 7 more
#VU74224 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-25950	CWE-444	Medium	Available	No	2.6.6-3	31.03.2023	SB2023033109 SB2023042660
#VU72334 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-25725	CWE-444	Medium	No	No	2.2.16-4	16.02.2023	SB2023021659 SB2023021662 SB2023021663 and 22 more
#VU71431 - Improper input validation CVE-2023-0056	CWE-20	Medium	No	No	2.2.16-4	23.01.2023	SB2023012331 SB2023012332 SB2023012641 and 20 more
#VU61291 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0711	CWE-835	Medium	No	No	2.2.16-3, 2.4.8-2	14.03.2022	SB2022031420 SB2022031505 SB2022032910 and 8 more
#VU56401 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-40346	CWE-444	Medium	Available	No	2.2.16-2	08.09.2021	SB2021090813 SB2021090814 SB2021111101 and 11 more
#VU55971 - Improper input validation CVE-2021-39242	CWE-20	Medium	No	No	2.2.16-1	18.08.2021	SB2021081816 SB2021081819 SB2021111101 and 4 more
#VU55970 - Improper input validation CVE-2021-39241	CWE-20	Medium	No	No	2.2.16-1	18.08.2021	SB2021081816 SB2021081819 SB2021111101 and 7 more
#VU55969 - Improper input validation CVE-2021-39240	CWE-20	Medium	No	No	2.2.16-1	18.08.2021	SB2021081816 SB2021081819 SB2021111101 and 4 more
#VU26549 - Heap-based Buffer Overflow CVE-2020-11100	CWE-122	High	No	No	1.8.14-5	02.04.2020	SB2020040219 SB2020040220 SB2020040221 and 13 more