VulnerableCode Package Details - pkg:deb/debian/haproxy@1.8.19-1%2Bdeb10u3

Search for packages

Vulnerability	Summary	Fixed by
VCID-2zm3-vw55-k3af Aliases: CVE-2025-32464	haproxy: Buffer Overflow via Improper Back-Reference Replacement Length Check	2.6.12-1+deb12u3 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-4zyf-tsw1-8bfv Aliases: CVE-2019-19330	A vulnerability in HAProxy might lead to remote execution of arbitrary code.	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-5q7p-8nxf-sfem Aliases: CVE-2020-11100	A buffer overflow in HAProxy might allow an attacker to execute arbitrary code.	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-93ba-zj92-zqf1 Aliases: CVE-2021-39240	haproxy: does not ensure that the scheme and path portions of a URI have the expected characters	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-9gwz-6dnd-r7fj Aliases: CVE-2019-18277	haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-a7s4-6k62-3qh2 Aliases: CVE-2022-0711	haproxy: Denial of service via set-cookie2 header	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-atwp-g4uy-3qgg Aliases: CVE-2021-39242	haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-bb8w-k2e1-xbht Aliases: CVE-2023-25725	haproxy: request smuggling attack in HTTP/1 header parsing	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-jz63-5mba-3qbx Aliases: CVE-2021-40346	haproxy: request smuggling attack or response splitting via duplicate content-length header	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-mrdn-6cwg-j3h8 Aliases: CVE-2023-0836	haproxy: data leak via fcgi requests	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-s86j-egny-77cu Aliases: CVE-2023-45539	haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-sy71-5m1g-2yav Aliases: CVE-2021-39241	haproxy: an HTTP method name may contain a space followed by the name of a protected resource	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-w1we-d8uq-s3hh Aliases: CVE-2023-0056	haproxy: segfault DoS	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-ygb3-7kb1-tqbc Aliases: CVE-2023-40225	haproxy: Proxy forwards malformed empty Content-Length headers	2.2.9-2+deb11u6 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-2zm3-vw55-k3af
Aliases:
CVE-2025-32464

haproxy: Buffer Overflow via Improper Back-Reference Replacement Length Check

2.6.12-1+deb12u3
Affected by 3 other vulnerabilities.

VCID-4zyf-tsw1-8bfv
Aliases:
CVE-2019-19330

A vulnerability in HAProxy might lead to remote execution of arbitrary code.