3.7

CVE-2026-26080

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Haproxy ≫ Haproxy Version >= 3.2 < 3.2.12
Haproxy ≫ Haproxy Version >= 3.3 < 3.3.3
Haproxy ≫ Aloha Version >= 17.0.0 < 17.0.18
Haproxy ≫ Aloha Version >= 17.5.0 < 17.5.16
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.334
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.336
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.347
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.355
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.376
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.385
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.398
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-354.402
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-354.439
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-358.439
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-359.440
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-360.460
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-362.473
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-363.476
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-363.478
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-363.498
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-363.511
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-365.529
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-365.531
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-365.545
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.338
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
MITRE 3.7 2.2 1.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-252 Unchecked Return Value

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

https://www.haproxy.org
Product
https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=5bb098ce8a656ec5711b4de3e4c87f12b216e7a1
Patch
Vendor Advisory