4.8

CVE-2026-26081

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Haproxy ≫ Haproxy Version >= 3.0.0 < 3.0.16
Haproxy ≫ Haproxy Version >= 3.1 < 3.1.14
Haproxy ≫ Haproxy Version >= 3.2 < 3.2.12
Haproxy ≫ Haproxy Version >= 3.3 < 3.3.3
Haproxy ≫ Aloha Version >= 16.5.0.0 < 16.5.30
Haproxy ≫ Aloha Version >= 17.0.0 < 17.0.18
Haproxy ≫ Aloha Version >= 17.5.0 < 17.5.16
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-337.363
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-337.390
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-337.394
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.395
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.405
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.415
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.455
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.466
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-339.471
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-341.475
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-342.482
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.495
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.503
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.561
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.564
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.591
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.608
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.641
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.655
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-344.672
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-345.673
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-346.792
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-346.795
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-346.800
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-346.803
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-346.810
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-346.834
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-347.835
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-348.870
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-348.875
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-349.880
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-349.883
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-349.885
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-349.903
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-349.916
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-350.918
Haproxy ≫ Haproxy Enterprise Version 3.0r1 Update 1.0.0-350.928
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-345.233
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-346.274
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-346.287
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.299
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.338
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.362
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.405
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.419
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.431
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-347.449
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-348.519
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-349.585
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-350.593
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-350.602
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-350.625
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-350.633
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-351.652
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-352.687
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-353.690
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-353.692
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-353.715
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-353.730
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-354.732
Haproxy ≫ Haproxy Enterprise Version 3.1r1 Update 1.0.0-354.743
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.334
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.336
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.347
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.355
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.376
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.385
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-353.398
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-354.402
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-354.439
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-358.439
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-359.440
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-360.460
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-362.473
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-363.476
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-363.478
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-363.498
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-363.511
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-365.529
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-365.531
Haproxy ≫ Haproxy Enterprise Version 3.2r1 Update 1.0.0-365.545
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.286
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
MITRE 4.8 2.2 2.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
CWE-130 Improper Handling of Length Parameter Inconsistency

The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

https://www.haproxy.org
Product
https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=4765277f4f915baac2d57db63538ff0a59966deb
Patch
Vendor Advisory