Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/haproxy@1.7.5-2~bpo8%2B1
purl pkg:deb/debian/haproxy@1.7.5-2~bpo8%2B1
Next non-vulnerable version 3.2.15-1
Latest non-vulnerable version 3.2.15-1
Risk 10.0
Vulnerabilities affecting this package (21)
Vulnerability Summary Fixed by
VCID-2zm3-vw55-k3af
Aliases:
CVE-2025-32464
haproxy: Buffer Overflow via Improper Back-Reference Replacement Length Check
2.6.12-1+deb12u3
Affected by 3 other vulnerabilities.
VCID-31wf-mpnt-dycm
Aliases:
CVE-2018-20102
haproxy: Out-of-bounds read in dns.c:dns_validate_dns_response() allows for memory disclosure
1.8.19-1+deb10u3
Affected by 14 other vulnerabilities.
VCID-48er-rqvk-nyhg
Aliases:
CVE-2018-20103
haproxy: Infinite recursion via crafted packet allows stack exhaustion and denial of service
1.8.19-1+deb10u3
Affected by 14 other vulnerabilities.
VCID-4zyf-tsw1-8bfv
Aliases:
CVE-2019-19330
A vulnerability in HAProxy might lead to remote execution of arbitrary code.
1.8.19-1+deb10u3
Affected by 14 other vulnerabilities.
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-5781-s1ny-q7ey
Aliases:
CVE-2023-44487
GHSA-2m7v-gc89-fjqf
GHSA-qppj-fm5r-hxr3
GHSA-vx74-f528-fxqg
GHSA-xpw8-rcwv-8f8p
GMS-2023-3377
VSV00013
1.8.14-1~bpo8+1
Affected by 17 other vulnerabilities.
VCID-5q7p-8nxf-sfem
Aliases:
CVE-2020-11100
A buffer overflow in HAProxy might allow an attacker to execute arbitrary code.
1.8.19-1+deb10u3
Affected by 14 other vulnerabilities.
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-8e1s-dgj6-vyfq
Aliases:
CVE-2018-20615
haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash
1.8.19-1+deb10u3
Affected by 14 other vulnerabilities.
VCID-93ba-zj92-zqf1
Aliases:
CVE-2021-39240
haproxy: does not ensure that the scheme and path portions of a URI have the expected characters
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-9atw-pg8b-y3a2
Aliases:
CVE-2018-11469
haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c
1.8.14-1~bpo8+1
Affected by 17 other vulnerabilities.
VCID-9gwz-6dnd-r7fj
Aliases:
CVE-2019-18277
haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-a7s4-6k62-3qh2
Aliases:
CVE-2022-0711
haproxy: Denial of service via set-cookie2 header
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-atwp-g4uy-3qgg
Aliases:
CVE-2021-39242
haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-bb8w-k2e1-xbht
Aliases:
CVE-2023-25725
haproxy: request smuggling attack in HTTP/1 header parsing
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-gs9q-zgvz-vucq
Aliases:
CVE-2018-10184
haproxy: Heap buffer overflow in mux_h2.c:h2_process_demux() can allow attackers to cause a denial of service
1.8.9-2~bpo8+1
Affected by 20 other vulnerabilities.
VCID-jz63-5mba-3qbx
Aliases:
CVE-2021-40346
haproxy: request smuggling attack or response splitting via duplicate content-length header
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-mrdn-6cwg-j3h8
Aliases:
CVE-2023-0836
haproxy: data leak via fcgi requests
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-qp4n-c9fa-gfcs
Aliases:
CVE-2018-14645
haproxy: Out-of-bounds read in HPACK decoder
1.8.14-1~bpo8+1
Affected by 17 other vulnerabilities.
VCID-s86j-egny-77cu
Aliases:
CVE-2023-45539
haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-sy71-5m1g-2yav
Aliases:
CVE-2021-39241
haproxy: an HTTP method name may contain a space followed by the name of a protected resource
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-w1we-d8uq-s3hh
Aliases:
CVE-2023-0056
haproxy: segfault DoS
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
VCID-ygb3-7kb1-tqbc
Aliases:
CVE-2023-40225
haproxy: Proxy forwards malformed empty Content-Length headers
2.2.9-2+deb11u6
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T00:49:07.016358+00:00 Debian Oval Importer Affected by VCID-2zm3-vw55-k3af https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T00:15:21.885504+00:00 Debian Oval Importer Affected by VCID-jz63-5mba-3qbx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:13:34.563661+00:00 Debian Oval Importer Affected by VCID-w1we-d8uq-s3hh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:41:41.858847+00:00 Debian Oval Importer Affected by VCID-mrdn-6cwg-j3h8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:14:11.845419+00:00 Debian Oval Importer Affected by VCID-gs9q-zgvz-vucq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:00:52.633788+00:00 Debian Oval Importer Affected by VCID-a7s4-6k62-3qh2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:57:41.039307+00:00 Debian Oval Importer Affected by VCID-93ba-zj92-zqf1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:41:10.029355+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:04:43.995452+00:00 Debian Oval Importer Affected by VCID-48er-rqvk-nyhg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:55:52.520921+00:00 Debian Oval Importer Affected by VCID-5781-s1ny-q7ey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:46:20.362498+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:43:22.512483+00:00 Debian Oval Importer Affected by VCID-sy71-5m1g-2yav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:40:33.648928+00:00 Debian Oval Importer Affected by VCID-31wf-mpnt-dycm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:34:57.255638+00:00 Debian Oval Importer Affected by VCID-qp4n-c9fa-gfcs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:00:52.907324+00:00 Debian Oval Importer Affected by VCID-9gwz-6dnd-r7fj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:54:04.934130+00:00 Debian Oval Importer Affected by VCID-bb8w-k2e1-xbht https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:42:12.693407+00:00 Debian Oval Importer Affected by VCID-atwp-g4uy-3qgg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:52:21.998674+00:00 Debian Oval Importer Affected by VCID-ygb3-7kb1-tqbc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:31:43.511429+00:00 Debian Oval Importer Affected by VCID-s86j-egny-77cu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:26:33.779209+00:00 Debian Oval Importer Affected by VCID-9atw-pg8b-y3a2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:34:25.584288+00:00 Debian Oval Importer Affected by VCID-8e1s-dgj6-vyfq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T14:51:26.332596+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-15T14:44:42.720717+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-12T00:21:37.421483+00:00 Debian Oval Importer Affected by VCID-2zm3-vw55-k3af https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:49:04.616736+00:00 Debian Oval Importer Affected by VCID-jz63-5mba-3qbx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:49:23.243041+00:00 Debian Oval Importer Affected by VCID-w1we-d8uq-s3hh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:18:20.303773+00:00 Debian Oval Importer Affected by VCID-mrdn-6cwg-j3h8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:51:51.192400+00:00 Debian Oval Importer Affected by VCID-gs9q-zgvz-vucq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:39:05.175559+00:00 Debian Oval Importer Affected by VCID-a7s4-6k62-3qh2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:35:58.455848+00:00 Debian Oval Importer Affected by VCID-93ba-zj92-zqf1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:19:57.874488+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:44:48.191683+00:00 Debian Oval Importer Affected by VCID-48er-rqvk-nyhg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:36:17.341986+00:00 Debian Oval Importer Affected by VCID-5781-s1ny-q7ey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:27:15.511690+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:25:51.774240+00:00 Debian Oval Importer Affected by VCID-sy71-5m1g-2yav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:25:01.199270+00:00 Debian Oval Importer Affected by VCID-31wf-mpnt-dycm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:19:36.868274+00:00 Debian Oval Importer Affected by VCID-qp4n-c9fa-gfcs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:46:39.477917+00:00 Debian Oval Importer Affected by VCID-9gwz-6dnd-r7fj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:40:02.881863+00:00 Debian Oval Importer Affected by VCID-bb8w-k2e1-xbht https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:28:17.918091+00:00 Debian Oval Importer Affected by VCID-atwp-g4uy-3qgg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:39:06.180021+00:00 Debian Oval Importer Affected by VCID-ygb3-7kb1-tqbc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:18:48.604965+00:00 Debian Oval Importer Affected by VCID-s86j-egny-77cu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:13:45.882504+00:00 Debian Oval Importer Affected by VCID-9atw-pg8b-y3a2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:22:23.564757+00:00 Debian Oval Importer Affected by VCID-8e1s-dgj6-vyfq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T14:39:40.878149+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-11T14:33:00.144210+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-08T23:52:20.482981+00:00 Debian Oval Importer Affected by VCID-2zm3-vw55-k3af https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:21:13.286821+00:00 Debian Oval Importer Affected by VCID-jz63-5mba-3qbx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:24:01.688380+00:00 Debian Oval Importer Affected by VCID-w1we-d8uq-s3hh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:54:30.003718+00:00 Debian Oval Importer Affected by VCID-mrdn-6cwg-j3h8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:29:20.390904+00:00 Debian Oval Importer Affected by VCID-gs9q-zgvz-vucq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:17:05.688846+00:00 Debian Oval Importer Affected by VCID-a7s4-6k62-3qh2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:14:07.338265+00:00 Debian Oval Importer Affected by VCID-93ba-zj92-zqf1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:58:40.599977+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:24:38.980626+00:00 Debian Oval Importer Affected by VCID-48er-rqvk-nyhg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:16:24.063223+00:00 Debian Oval Importer Affected by VCID-5781-s1ny-q7ey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:07:41.931242+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:09:25.167615+00:00 Debian Oval Importer Affected by VCID-sy71-5m1g-2yav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:10:56.332733+00:00 Debian Oval Importer Affected by VCID-31wf-mpnt-dycm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:05:41.897368+00:00 Debian Oval Importer Affected by VCID-qp4n-c9fa-gfcs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:33:53.845840+00:00 Debian Oval Importer Affected by VCID-9gwz-6dnd-r7fj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:27:24.179801+00:00 Debian Oval Importer Affected by VCID-bb8w-k2e1-xbht https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:16:17.761856+00:00 Debian Oval Importer Affected by VCID-atwp-g4uy-3qgg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:29:43.892193+00:00 Debian Oval Importer Affected by VCID-ygb3-7kb1-tqbc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:10:51.064058+00:00 Debian Oval Importer Affected by VCID-s86j-egny-77cu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:06:07.076394+00:00 Debian Oval Importer Affected by VCID-9atw-pg8b-y3a2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:17:00.800146+00:00 Debian Oval Importer Affected by VCID-8e1s-dgj6-vyfq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T23:12:43.245027+00:00 Debian Oval Importer Affected by VCID-5q7p-8nxf-sfem https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0
2026-04-07T23:06:16.599055+00:00 Debian Oval Importer Affected by VCID-4zyf-tsw1-8bfv https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0