Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/haproxy@1.7.5-2
purl pkg:deb/debian/haproxy@1.7.5-2
Next non-vulnerable version 3.2.15-1
Latest non-vulnerable version 3.2.15-1
Risk 10.0
Vulnerabilities affecting this package (21)
Vulnerability Summary Fixed by
VCID-2zm3-vw55-k3af
Aliases:
CVE-2025-32464
haproxy: Buffer Overflow via Improper Back-Reference Replacement Length Check
2.6.12-1+deb12u3
Affected by 3 other vulnerabilities.
VCID-31wf-mpnt-dycm
Aliases:
CVE-2018-20102
haproxy: Out-of-bounds read in dns.c:dns_validate_dns_response() allows for memory disclosure
1.8.19-1+deb10u3
Affected by 14 other vulnerabilities.
VCID-48er-rqvk-nyhg
Aliases:
CVE-2018-20103
haproxy: Infinite recursion via crafted packet allows stack exhaustion and denial of service
1.8.19-1+deb10u3
Affected by 14 other vulnerabilities.
VCID-4zyf-tsw1-8bfv
Aliases:
CVE-2019-19330
A vulnerability in HAProxy might lead to remote execution of arbitrary code.
1.8.19-1+deb10u3
Affected by 14 other vulnerabilities.
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-5781-s1ny-q7ey
Aliases:
CVE-2023-44487
GHSA-2m7v-gc89-fjqf
GHSA-qppj-fm5r-hxr3
GHSA-vx74-f528-fxqg
GHSA-xpw8-rcwv-8f8p
GMS-2023-3377
VSV00013
1.8.14-1~bpo8+1
Affected by 17 other vulnerabilities.
VCID-5q7p-8nxf-sfem
Aliases:
CVE-2020-11100
A buffer overflow in HAProxy might allow an attacker to execute arbitrary code.
1.8.19-1+deb10u3
Affected by 14 other vulnerabilities.
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-8e1s-dgj6-vyfq
Aliases:
CVE-2018-20615
haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash
1.8.19-1+deb10u3
Affected by 14 other vulnerabilities.
VCID-93ba-zj92-zqf1
Aliases:
CVE-2021-39240
haproxy: does not ensure that the scheme and path portions of a URI have the expected characters
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-9atw-pg8b-y3a2
Aliases:
CVE-2018-11469
haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c
1.8.14-1~bpo8+1
Affected by 17 other vulnerabilities.
VCID-9gwz-6dnd-r7fj
Aliases:
CVE-2019-18277
haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-a7s4-6k62-3qh2
Aliases:
CVE-2022-0711
haproxy: Denial of service via set-cookie2 header
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-atwp-g4uy-3qgg
Aliases:
CVE-2021-39242
haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-bb8w-k2e1-xbht
Aliases:
CVE-2023-25725
haproxy: request smuggling attack in HTTP/1 header parsing
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-gs9q-zgvz-vucq
Aliases:
CVE-2018-10184
haproxy: Heap buffer overflow in mux_h2.c:h2_process_demux() can allow attackers to cause a denial of service
1.8.9-2~bpo8+1
Affected by 20 other vulnerabilities.
VCID-jz63-5mba-3qbx
Aliases:
CVE-2021-40346
haproxy: request smuggling attack or response splitting via duplicate content-length header
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-mrdn-6cwg-j3h8
Aliases:
CVE-2023-0836
haproxy: data leak via fcgi requests
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-qp4n-c9fa-gfcs
Aliases:
CVE-2018-14645
haproxy: Out-of-bounds read in HPACK decoder
1.8.14-1~bpo8+1
Affected by 17 other vulnerabilities.
VCID-s86j-egny-77cu
Aliases:
CVE-2023-45539
haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-sy71-5m1g-2yav
Aliases:
CVE-2021-39241
haproxy: an HTTP method name may contain a space followed by the name of a protected resource
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-w1we-d8uq-s3hh
Aliases:
CVE-2023-0056
haproxy: segfault DoS
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-ygb3-7kb1-tqbc
Aliases:
CVE-2023-40225
haproxy: Proxy forwards malformed empty Content-Length headers
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T00:49:07.019931+00:00 Debian Oval Importer Affected by VCID-2zm3-vw55-k3af https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T00:15:21.889120+00:00 Debian Oval Importer Affected by VCID-jz63-5mba-3qbx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:13:34.567785+00:00 Debian Oval Importer Affected by VCID-w1we-d8uq-s3hh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:41:41.862193+00:00 Debian Oval Importer Affected by VCID-mrdn-6cwg-j3h8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:14:11.849087+00:00 Debian Oval Importer Affected by VCID-gs9q-zgvz-vucq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:00:52.637322+00:00 Debian Oval Importer Affected by VCID-a7s4-6k62-3qh2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:57:41.042947+00:00 Debian Oval Importer Affected by VCID-93ba-zj92-zqf1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:41:10.032813+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:04:43.999374+00:00 Debian Oval Importer Affected by VCID-48er-rqvk-nyhg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:55:52.524575+00:00 Debian Oval Importer Affected by VCID-5781-s1ny-q7ey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:46:20.365739+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:43:22.516309+00:00 Debian Oval Importer Affected by VCID-sy71-5m1g-2yav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:40:33.652903+00:00 Debian Oval Importer Affected by VCID-31wf-mpnt-dycm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:34:57.259663+00:00 Debian Oval Importer Affected by VCID-qp4n-c9fa-gfcs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:00:52.911102+00:00 Debian Oval Importer Affected by VCID-9gwz-6dnd-r7fj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:54:04.938203+00:00 Debian Oval Importer Affected by VCID-bb8w-k2e1-xbht https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:42:12.697104+00:00 Debian Oval Importer Affected by VCID-atwp-g4uy-3qgg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:52:22.002460+00:00 Debian Oval Importer Affected by VCID-ygb3-7kb1-tqbc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:31:43.515095+00:00 Debian Oval Importer Affected by VCID-s86j-egny-77cu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:26:33.782601+00:00 Debian Oval Importer Affected by VCID-9atw-pg8b-y3a2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:34:25.587718+00:00 Debian Oval Importer Affected by VCID-8e1s-dgj6-vyfq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T14:51:26.335815+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-15T14:44:42.724017+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-12T00:21:37.425510+00:00 Debian Oval Importer Affected by VCID-2zm3-vw55-k3af https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:49:04.620789+00:00 Debian Oval Importer Affected by VCID-jz63-5mba-3qbx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:49:23.246765+00:00 Debian Oval Importer Affected by VCID-w1we-d8uq-s3hh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:18:20.307352+00:00 Debian Oval Importer Affected by VCID-mrdn-6cwg-j3h8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:51:51.196084+00:00 Debian Oval Importer Affected by VCID-gs9q-zgvz-vucq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:39:05.179606+00:00 Debian Oval Importer Affected by VCID-a7s4-6k62-3qh2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:35:58.459568+00:00 Debian Oval Importer Affected by VCID-93ba-zj92-zqf1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:19:57.878220+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:44:48.195538+00:00 Debian Oval Importer Affected by VCID-48er-rqvk-nyhg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:36:17.343569+00:00 Debian Oval Importer Affected by VCID-5781-s1ny-q7ey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:27:15.515691+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:25:51.778025+00:00 Debian Oval Importer Affected by VCID-sy71-5m1g-2yav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:25:01.202991+00:00 Debian Oval Importer Affected by VCID-31wf-mpnt-dycm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:19:36.872274+00:00 Debian Oval Importer Affected by VCID-qp4n-c9fa-gfcs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:46:39.481858+00:00 Debian Oval Importer Affected by VCID-9gwz-6dnd-r7fj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:40:02.886221+00:00 Debian Oval Importer Affected by VCID-bb8w-k2e1-xbht https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:28:17.922203+00:00 Debian Oval Importer Affected by VCID-atwp-g4uy-3qgg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:39:06.184305+00:00 Debian Oval Importer Affected by VCID-ygb3-7kb1-tqbc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:18:48.609067+00:00 Debian Oval Importer Affected by VCID-s86j-egny-77cu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:13:45.886846+00:00 Debian Oval Importer Affected by VCID-9atw-pg8b-y3a2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:22:23.568557+00:00 Debian Oval Importer Affected by VCID-8e1s-dgj6-vyfq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T14:39:40.881895+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-11T14:33:00.148154+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-08T23:52:20.487141+00:00 Debian Oval Importer Affected by VCID-2zm3-vw55-k3af https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:21:13.291135+00:00 Debian Oval Importer Affected by VCID-jz63-5mba-3qbx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:24:01.693149+00:00 Debian Oval Importer Affected by VCID-w1we-d8uq-s3hh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:54:30.007922+00:00 Debian Oval Importer Affected by VCID-mrdn-6cwg-j3h8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:29:20.395250+00:00 Debian Oval Importer Affected by VCID-gs9q-zgvz-vucq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:17:05.693160+00:00 Debian Oval Importer Affected by VCID-a7s4-6k62-3qh2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:14:07.342685+00:00 Debian Oval Importer Affected by VCID-93ba-zj92-zqf1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:58:40.605212+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:24:38.984943+00:00 Debian Oval Importer Affected by VCID-48er-rqvk-nyhg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:16:24.067533+00:00 Debian Oval Importer Affected by VCID-5781-s1ny-q7ey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:07:41.935142+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:09:25.171639+00:00 Debian Oval Importer Affected by VCID-sy71-5m1g-2yav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:10:56.337523+00:00 Debian Oval Importer Affected by VCID-31wf-mpnt-dycm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:05:41.902001+00:00 Debian Oval Importer Affected by VCID-qp4n-c9fa-gfcs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:33:53.850112+00:00 Debian Oval Importer Affected by VCID-9gwz-6dnd-r7fj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:27:24.184347+00:00 Debian Oval Importer Affected by VCID-bb8w-k2e1-xbht https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:16:17.766552+00:00 Debian Oval Importer Affected by VCID-atwp-g4uy-3qgg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:29:43.896211+00:00 Debian Oval Importer Affected by VCID-ygb3-7kb1-tqbc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:10:51.068456+00:00 Debian Oval Importer Affected by VCID-s86j-egny-77cu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:06:07.080710+00:00 Debian Oval Importer Affected by VCID-9atw-pg8b-y3a2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:17:00.804041+00:00 Debian Oval Importer Affected by VCID-8e1s-dgj6-vyfq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T23:12:43.249490+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0
2026-04-07T23:06:16.604576+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0