InfraGuard

HAProxy 2.0 취약점

HAProxy 2.0 라인에 영향을 주는 알려진 CVE 는 11건입니다.

9.8 최고 CVSS2024-04-05 지원 종료

수정 버전

2.0.62.0.102.0.242.0.252.0.31
설치된 버전 확인haproxy -v

2.0 에 영향을 주는 CVE

CVE 제목 CVSS 악용 EPSS 공개일
CVE-2019-19330 The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR,... 9.8 — 2019-11-28
CVE-2023-25725 HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in som... 9.1 — 2023-02-14
CVE-2026-55203 HAProxy - Integer Overflow in FCGI Demux Record Length Field 9.0 — 2026-06-19
CVE-2020-11100 In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote atta... 8.8 — 2020-04-02
CVE-2026-55204 HAProxy - NULL Pointer Dereference in hpack_dht_insert Function 8.7 — 2026-06-19
CVE-2023-45539 HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sens... 8.2 — 2023-11-28
CVE-2019-14241 HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_mana... 7.5 — 2019-07-23
CVE-2019-18277 A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missin... 7.5 — 2019-10-23
CVE-2021-40346 An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HT... 7.5 — 2021-09-09
CVE-2023-40225 HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before... 7.2 — 2023-08-10
CVE-2021-39241 An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4... 5.3 — 2021-08-18

내 서버의 버전을 직접 추적하세요

InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.

주간 악용 취약점 다이제스트

셀프호스팅 서버에 중요한 KEV 추가분을 일주일에 한 번 보내드립니다. 다른 메일은 보내지 않습니다.

데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).