FlawAtlas
Search the atlas
USN-7067-1 Not scored

haproxy vulnerability

It was discovered that HAProxy did not properly limit the creation of new HTTP/2 streams. A remote attacker could possibly use this issue to cause HAProxy to consume excessive resources, leading to a denial of service.

Exploit probability Not scored
Published October 14, 2024
Required by Not available
Last source change April 27, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:Pro:18.04:LTS haproxy

17 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities USN-7067-1

It was discovered that HAProxy did not properly limit the creation of new HTTP/2 streams. A remote attacker could possibly use this issue to cause HAProxy to consume excessive resources, leading to a denial of service.

View original source

05 / REFERENCES

Further evidence