7.5

CVE-2025-11230

Denial of service vulnerability in HAProxy mjson library

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Haproxy ≫ Aloha Appliance Version >= 14.5.0 < 14.5.33
Haproxy ≫ Aloha Appliance Version >= 15.5.0 < 15.5.28
Haproxy ≫ Aloha Appliance Version >= 16.5.0 < 16.5.19
Haproxy ≫ Aloha Appliance Version >= 17.0.0 < 17.0.7
Haproxy ≫ Haproxy Version >= 2.4.0 < 2.4.30
Haproxy ≫ Haproxy Version >= 2.6.0 < 2.6.23
Haproxy ≫ Haproxy Version >= 2.8.0 < 2.8.16
Haproxy ≫ Haproxy Version >= 3.0.0 < 3.0.12
Haproxy ≫ Haproxy Version >= 3.1.0 < 3.1.9
Haproxy ≫ Haproxy Version >= 3.2.0 < 3.2.6
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-253.271
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-254.271
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-259.342
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-263.343
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-264.356
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-268.356
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-268.373
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-268.459
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-268.464
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-268.477
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-268.499
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-268.553
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-268.560
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-268.564
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-268.596
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-269.596
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-269.599
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-270.616
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-271.673
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-271.677
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-272.683
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-272.686
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-272.728
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-274.752
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-276.752
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-277.814
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-277.831
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-278.838
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-279.852
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-279.859
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-279.877
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-279.911
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-279.940
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-279.952
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-279.953
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-279.956
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-280.956
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-282.998
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-282.999
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-284.999
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-285.1010
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-286.1064
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-286.1068
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-286.1089
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-286.1094
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-288.1094
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-288.1158
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-288.1167
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-288.1189
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-289.1189
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-290.1239
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-291.1246
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-292.1293
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-294.1346
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-294.1364
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-294.1376
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-294.1377
Haproxy ≫ Haproxy Enterprise Version 2.4r1 Update 1.0.0-294.1442
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-281.466
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-282.561
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-283.562
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-283.565
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-283.616
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-283.632
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-283.633
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-283.636
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-284.636
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-285.726
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-285.727
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-287.727
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-288.770
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-288.773
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-288.848
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-288.849
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-289.1020
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-289.1028
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-289.1041
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-289.873
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-289.975
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-289.976
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-291.1046
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-292.1046
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-292.1055
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-292.1120
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-292.1147
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-292.1148
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-292.1156
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-292.1181
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-292.1187
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-293.1189
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-293.1190
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-294.1212
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-294.1285
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-295.1303
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-296.1392
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-296.1416
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-299.1416
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-299.1474
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-299.1487
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-299.1511
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-299.1542
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-299.1557
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-299.1596
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-299.1603
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-299.1606
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-299.1618
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-300.1666
Haproxy ≫ Haproxy Enterprise Version 2.6r1 Update 1.0.0-301.1666
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-302.234
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-304.266
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-305.279
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-305.285
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-306.288
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-306.289
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-307.317
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-310.350
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-310.364
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-310.373
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-310.374
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-310.418
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-310.422
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-310.424
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-311.449
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-311.452
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-311.453
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-312.592
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-312.613
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-317.613
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-318.674
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-319.699
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-319.723
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-320.750
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-320.761
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-320.770
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-320.780
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-320.781
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-320.783
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-320.831
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-320.851
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-320.853
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-320.895
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-321.895
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-321.901
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-321.919
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-321.931
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-321.934
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-321.937
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-322.942
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-324.1030
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-324.1071
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-324.1072
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-324.947
Haproxy ≫ Haproxy Enterprise Version 2.8r1 Update 1.0.0-326.1073
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-337.363
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-337.390
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-337.394
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.395
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.405
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.415
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.455
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.466
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.471
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-341.475
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-342.482
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.495
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.503
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.561
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.564
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.591
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.608
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.641
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.655
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.672
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-345.673
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-346.792
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-345.233
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-346.274
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-346.287
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.299
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.338
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.362
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.405
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.419
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.431
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.449
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-348.519
Haproxy ≫ Kubernetes Ingress Controller SwEdition enterprise Version < 1.9.14-ee7
Haproxy ≫ Kubernetes Ingress Controller SwEdition community Version < 3.1.12
Haproxy ≫ Kubernetes Ingress Controller SwEdition enterprise Version >= 1.10.10-ee1 < 1.11.12-ee10
Haproxy ≫ Kubernetes Ingress Controller SwEdition enterprise Version >= 3.0.0-ee1 < 3.0.15-ee4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.69% 0.498
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Canonical 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-407 Inefficient Algorithmic Complexity

An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability
Vendor Advisory