rpm package
suse/haproxy&distro=SUSE Linux Micro 6.2
pkg:rpm/suse/haproxy&distro=SUSE%20Linux%20Micro%206.2
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-33555 | Med | 4.0 | < 3.2.15+git64.0fc44b458-160000.2.1 | 3.2.15+git64.0fc44b458-160000.2.1 | Apr 13, 2026 | An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend serv | |
| CVE-2025-11230 | — | < 3.2.0+git0.e134140d2-160000.3.1 | 3.2.0+git0.e134140d2-160000.3.1 | Nov 19, 2025 | Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests. |
- affected < 3.2.15+git64.0fc44b458-160000.2.1fixed 3.2.15+git64.0fc44b458-160000.2.1
An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend serv
- CVE-2025-11230Nov 19, 2025affected < 3.2.0+git0.e134140d2-160000.3.1fixed 3.2.0+git0.e134140d2-160000.3.1
Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.