InfraGuard

HAProxy 2.2 漏洞

影响 HAProxy 2.2 系列的已知 CVE 共 11 个。

9.1 最高 CVSS已于 2025-04-23 停止支持

修复版本

2.2.162.2.172.2.212.2.272.2.29
检查您的版本haproxy -v

影响 2.2 的 CVE

CVE 标题 CVSS 被利用 EPSS 发布日期
CVE-2023-25725 HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in som... 9.1 — 2023-02-14
CVE-2026-55203 HAProxy - Integer Overflow in FCGI Demux Record Length Field 9.0 — 2026-06-19
CVE-2026-55204 HAProxy - NULL Pointer Dereference in hpack_dht_insert Function 8.7 — 2026-06-19
CVE-2023-45539 HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sens... 8.2 — 2023-11-28
CVE-2021-39240 An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ens... 7.5 — 2021-08-18
CVE-2021-39242 An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to... 7.5 — 2021-08-18
CVE-2021-40346 An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HT... 7.5 — 2021-09-09
CVE-2022-0711 A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw co... 7.5 — 2022-03-03
CVE-2023-0836 An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.... 7.5 — 2023-03-29
CVE-2023-40225 HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before... 7.2 — 2023-08-10
CVE-2021-39241 An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4... 5.3 — 2021-08-18

在您自己的服务器上追踪这些版本

InfraGuard 从每台服务器收集已安装软件的版本,并标出存在已知漏洞的版本。自托管部署——数据不会离开您的网络。

每周已被利用漏洞摘要

每周一次,推送与自托管服务器相关的 KEV 新增条目。不发送其他邮件。

数据来源:CVE List(CVE® Program)、NVD、CISA KEV、FIRST EPSS(EPSS 详见 https://www.first.org/epss)、endoflife.date。软件列表:awesome-selfhosted(CC BY-SA 3.0)。