InfraGuard

HAProxy 1.9 취약점

HAProxy 1.9 라인에 영향을 주는 알려진 CVE 는 11건입니다.

9.8 최고 CVSS2020-07-31 지원 종료

수정 버전

1.9.7
설치된 버전 확인haproxy -v

1.9 에 영향을 주는 CVE

CVE 제목 CVSS 악용 EPSS 공개일
CVE-2019-19330 The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR,... 9.8 — 2019-11-28
CVE-2023-25725 HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in som... 9.1 — 2023-02-14
CVE-2026-55203 HAProxy - Integer Overflow in FCGI Demux Record Length Field 9.0 — 2026-06-19
CVE-2020-11100 In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote atta... 8.8 — 2020-04-02
CVE-2026-55204 HAProxy - NULL Pointer Dereference in hpack_dht_insert Function 8.7 — 2026-06-19
CVE-2023-45539 HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sens... 8.2 — 2023-11-28
CVE-2018-20615 An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1... 7.5 — 2019-03-19
CVE-2019-14241 HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_mana... 7.5 — 2019-07-23
CVE-2019-18277 A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missin... 7.5 — 2019-10-23
CVE-2023-40225 HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before... 7.2 — 2023-08-10
CVE-2019-11323 HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very pred... 5.9 — 2019-05-09

내 서버의 버전을 직접 추적하세요

InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.

주간 악용 취약점 다이제스트

셀프호스팅 서버에 중요한 KEV 추가분을 일주일에 한 번 보내드립니다. 다른 메일은 보내지 않습니다.

데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).