CVE-2025-11230

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-11230", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "state": "PUBLISHED", "assignerShortName": "canonical", "dateReserved": "2025-10-01T13:10:26.249Z", "datePublished": "2025-11-19T09:28:39.750Z", "dateUpdated": "2025-11-19T17:09:15.642Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "HAProxy Community Edition", "programFiles": ["src/mjson.c"], "repo": "https://git.haproxy.org/", "vendor": "HAProxy Technologies", "versions": [{"lessThan": "2.4.30", "status": "affected", "version": "2.4.0", "versionType": "semver"}, {"lessThan": "2.6.23", "status": "affected", "version": "2.6.0", "versionType": "semver"}, {"lessThan": "2.8.16", "status": "affected", "version": "2.8.0", "versionType": "semver"}, {"lessThan": "3.0.12", "status": "affected", "version": "3.0.0", "versionType": "semver"}, {"lessThan": "3.1.9", "status": "affected", "version": "3.1.0", "versionType": "semver"}, {"lessThan": "3.2.6", "status": "affected", "version": "3.2.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests."}], "value": "Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests."}], "impacts": [{"capecId": "CAPEC-130", "descriptions": [{"lang": "en", "value": "CAPEC-130 Excessive Allocation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-407", "description": "CWE-407 Inefficient Algorithmic Complexity", "lang": "en", "type": "CWE"}]}], "references": [{"url": "https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability"}], "source": {"discovery": "UNKNOWN"}, "title": "Denial of service vulnerability in HAProxy mjson library", "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2025-11-19T09:28:39.750Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-19T17:06:27.675545Z", "id": "CVE-2025-11230", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-19T17:09:15.642Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-11230", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-19T17:06:27.675545Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-19T17:09:02.607Z"}}], "cna": {"title": "Denial of service vulnerability in HAProxy mjson library", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-130", "descriptions": [{"lang": "en", "value": "CAPEC-130 Excessive Allocation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://git.haproxy.org/", "vendor": "HAProxy Technologies", "product": "HAProxy Community Edition", "versions": [{"status": "affected", "version": "2.4.0", "lessThan": "2.4.30", "versionType": "semver"}, {"status": "affected", "version": "2.6.0", "lessThan": "2.6.23", "versionType": "semver"}, {"status": "affected", "version": "2.8.0", "lessThan": "2.8.16", "versionType": "semver"}, {"status": "affected", "version": "3.0.0", "lessThan": "3.0.12", "versionType": "semver"}, {"status": "affected", "version": "3.1.0", "lessThan": "3.1.9", "versionType": "semver"}, {"status": "affected", "version": "3.2.0", "lessThan": "3.2.6", "versionType": "semver"}], "programFiles": ["src/mjson.c"], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability"}], "descriptions": [{"lang": "en", "value": "Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.", "supportingMedia": [{"type": "text/html", "value": "Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-407", "description": "CWE-407 Inefficient Algorithmic Complexity"}]}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2025-11-19T09:28:39.750Z"}}}, "cveMetadata": {"cveId": "CVE-2025-11230", "state": "PUBLISHED", "dateUpdated": "2025-11-19T17:09:15.642Z", "dateReserved": "2025-10-01T13:10:26.249Z", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "datePublished": "2025-11-19T09:28:39.750Z", "assignerShortName": "canonical"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "HAProxy Community Edition", "programFiles": ["src/mjson.c"], "repo": "https://git.haproxy.org/", "vendor": "HAProxy Technologies", "versions": [{"lessThan": "2.4.30", "status": "affected", "version": "2.4.0", "versionType": "semver"}, {"lessThan": "2.6.23", "status": "affected", "version": "2.6.0", "versionType": "semver"}, {"lessThan": "2.8.16", "status": "affected", "version": "2.8.0", "versionType": "semver"}, {"lessThan": "3.0.12", "status": "affected", "version": "3.0.0", "versionType": "semver"}, {"lessThan": "3.1.9", "status": "affected", "version": "3.1.0", "versionType": "semver"}, {"lessThan": "3.2.6", "status": "affected", "version": "3.2.0", "versionType": "semver"}]}], "source": "security@ubuntu.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:haproxy:aloha_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "89F5C682-A34A-4B37-A271-8692708B61A8", "versionEndExcluding": "14.5.33", "versionStartIncluding": "14.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:aloha_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "C09F7887-BC26-4228-8CC3-F50ADB5A57A7", "versionEndExcluding": "15.5.28", "versionStartIncluding": "15.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:aloha_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "C3138FAF-4B62-473C-8CC5-12FAA99BF7D3", "versionEndExcluding": "16.5.19", "versionStartIncluding": "16.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:aloha_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "C5B4D993-4C11-4D32-A071-4E96D54E6067", "versionEndExcluding": "17.0.7", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", "matchCriteriaId": "29441137-F078-48A2-9222-4B3BB210CE5C", "versionEndExcluding": "2.4.30", "versionStartIncluding": "2.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", "matchCriteriaId": "68DBA1BA-AAA7-4105-8FE4-3997D8739D9C", "versionEndExcluding": "2.6.23", "versionStartIncluding": "2.6.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2E3634B-D997-4F5A-B163-715204FF5E9C", "versionEndExcluding": "2.8.16", "versionStartIncluding": "2.8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", "matchCriteriaId": "87B62C89-3578-4A51-9BF6-AA796EE7B0BC", "versionEndExcluding": "3.0.12", "versionStartIncluding": "3.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", "matchCriteriaId": "0FD13450-6260-49B9-A9B1-6C2D17146FCA", "versionEndExcluding": "3.1.9", "versionStartIncluding": "3.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", "matchCriteriaId": "957368C8-D147-4EAE-AC22-5F6660BC6998", "versionEndExcluding": "3.2.6", "versionStartIncluding": "3.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-253.271:*:*:*:*:*:*", "matchCriteriaId": "D0E40014-EA6C-4521-89D7-0FB722261501", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-254.271:*:*:*:*:*:*", "matchCriteriaId": "25380A20-831C-4494-8659-103375D1074F", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-259.342:*:*:*:*:*:*", "matchCriteriaId": "BC635BE1-161A-453B-A5DE-F30079E41273", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-263.343:*:*:*:*:*:*", "matchCriteriaId": "7F705DCD-2A71-4A5F-8C43-AC2F3E398B05", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-264.356:*:*:*:*:*:*", "matchCriteriaId": "35DFC7FB-EE31-475C-AEBA-273089521A93", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.356:*:*:*:*:*:*", "matchCriteriaId": "2AC3898A-4194-4896-A135-BD0DE9928291", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.373:*:*:*:*:*:*", "matchCriteriaId": "D73FBC8F-DB12-4C7F-9242-4A42CD56AD38", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.459:*:*:*:*:*:*", "matchCriteriaId": "C0E7CC9E-F8A6-4F36-A3DE-CF5C109E8AC1", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.464:*:*:*:*:*:*", "matchCriteriaId": "DB408D95-D8B8-42B4-9FA0-C83444D87863", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.477:*:*:*:*:*:*", "matchCriteriaId": "F5F2AD1B-5A01-4528-8059-F34BAD131203", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.499:*:*:*:*:*:*", "matchCriteriaId": "BD1DAB21-6F47-40B1-8AA3-170DDBF52B77", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.553:*:*:*:*:*:*", "matchCriteriaId": "3551672D-118B-4948-9EF5-3B270C3AEFB8", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.560:*:*:*:*:*:*", "matchCriteriaId": "5B7C7B03-DE43-4D6F-8E5D-25EF0E3EA129", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.564:*:*:*:*:*:*", "matchCriteriaId": "781A150F-5CBF-468A-880B-116056F52356", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.596:*:*:*:*:*:*", "matchCriteriaId": "1397D597-10D1-412E-B7E8-F533F7367FEB", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-269.596:*:*:*:*:*:*", "matchCriteriaId": "C2B374DA-EF98-4CAF-94C7-4DC9C0FE6284", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-269.599:*:*:*:*:*:*", "matchCriteriaId": "41078FD3-B2A3-4C80-ABA1-0DAB1BD916C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-270.616:*:*:*:*:*:*", "matchCriteriaId": "03E4E4FC-E5E3-43C4-B478-DB79931EB61F", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-271.673:*:*:*:*:*:*", "matchCriteriaId": "570E32DC-7B04-4397-8368-533D38BF236C", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-271.677:*:*:*:*:*:*", "matchCriteriaId": "E1061325-D6F4-4249-82AA-D09A95E7DE18", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-272.683:*:*:*:*:*:*", "matchCriteriaId": "3997AB00-517B-4F06-AFF8-58E860A1A15D", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-272.686:*:*:*:*:*:*", "matchCriteriaId": "80A5164F-7BE0-493F-9C1C-6C39C5AED25E", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-272.728:*:*:*:*:*:*", "matchCriteriaId": "4F3BC464-9C9D-4E37-A917-82455EF8B05D", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-274.752:*:*:*:*:*:*", "matchCriteriaId": "1D650CA1-6B4E-4404-BBB8-3866016037AA", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-276.752:*:*:*:*:*:*", "matchCriteriaId": "8A088706-69A1-49B1-ACA6-5B7641B844B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-277.814:*:*:*:*:*:*", "matchCriteriaId": "CA569475-70D0-429E-9B46-8ED4AE06AA2B", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-277.831:*:*:*:*:*:*", "matchCriteriaId": "683A33A3-9A91-4705-B317-41F907F5AE7D", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-278.838:*:*:*:*:*:*", "matchCriteriaId": "28B08E75-EDCC-4A7A-ABA5-56F5E20393CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.852:*:*:*:*:*:*", "matchCriteriaId": "51E28850-4435-42CB-AFCA-5318E995CC6F", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.859:*:*:*:*:*:*", "matchCriteriaId": "6896BE09-0263-44E0-9670-0A332BFBA456", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.877:*:*:*:*:*:*", "matchCriteriaId": "EF03C76B-878C-46C9-827C-1FC203725E33", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.911:*:*:*:*:*:*", "matchCriteriaId": "B6955936-7042-474C-B57F-6EBDFC7776FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.940:*:*:*:*:*:*", "matchCriteriaId": "C4FF2C8A-2B3C-4811-83FB-FDBCBDF7B329", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.952:*:*:*:*:*:*", "matchCriteriaId": "8C259A1C-700D-4831-8A8D-477B3BE84A09", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.953:*:*:*:*:*:*", "matchCriteriaId": "3C629869-526F-45D2-813B-05B10474D7DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.956:*:*:*:*:*:*", "matchCriteriaId": "D3D6B0B6-4EF0-461D-9A78-4488A0607049", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-280.956:*:*:*:*:*:*", "matchCriteriaId": "94C10C56-6F8C-4E8A-A8CD-1E70B873CA03", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-282.998:*:*:*:*:*:*", "matchCriteriaId": "50E7AE42-62EA-4463-A00B-F8BB01C36AE8", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-282.999:*:*:*:*:*:*", "matchCriteriaId": "A681FB96-21FF-4F0D-8557-DF823F101E98", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-284.999:*:*:*:*:*:*", "matchCriteriaId": "52FC716A-2571-4B82-AEA6-6410C5D569FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-285.1010:*:*:*:*:*:*", "matchCriteriaId": "8CCA23CA-F7AC-4469-9097-E4E3BC0508B3", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1064:*:*:*:*:*:*", "matchCriteriaId": "B02A78D5-7E8B-4929-BD5A-FE45BBA75D0D", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1068:*:*:*:*:*:*", "matchCriteriaId": "413074E3-D4CE-4E7F-A716-141466DE8742", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1089:*:*:*:*:*:*", "matchCriteriaId": "E90762B6-200C-494F-8D94-54835D5E88CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1094:*:*:*:*:*:*", "matchCriteriaId": "FB4AFA16-7891-4032-9BAB-0A275414DC81", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1094:*:*:*:*:*:*", "matchCriteriaId": "A26C9E99-9A5E-457A-B16E-BF23053E6C54", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1158:*:*:*:*:*:*", "matchCriteriaId": "7E9C12FE-31F5-4D17-B0AB-AD63CE3F0A8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1167:*:*:*:*:*:*", "matchCriteriaId": "3F29D6B3-E5BB-4A39-9E16-4ED6950A58F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1189:*:*:*:*:*:*", "matchCriteriaId": "EC80D676-1A6C-4D36-96BD-822A1EE8E8E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-289.1189:*:*:*:*:*:*", "matchCriteriaId": "6B27E12F-158B-4E29-B5CE-779703267D16", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-290.1239:*:*:*:*:*:*", "matchCriteriaId": "AA0970BF-BF54-4139-A645-151AFD2A2BD5", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-291.1246:*:*:*:*:*:*", "matchCriteriaId": "F3BF7368-2201-4E8B-B8E7-A0FF8F47BDF5", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-292.1293:*:*:*:*:*:*", "matchCriteriaId": "83C04DB5-6319-4B48-9898-616699A47CDD", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1346:*:*:*:*:*:*", "matchCriteriaId": "52EE47D5-3FBD-4A2E-88C7-812A6E721D5C", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1364:*:*:*:*:*:*", "matchCriteriaId": "3D6A7C69-2D78-4B3D-B994-7A65A3325694", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1376:*:*:*:*:*:*", "matchCriteriaId": "DE787108-59AF-4BC8-977C-06FE5FE5B755", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1377:*:*:*:*:*:*", "matchCriteriaId": "FE5D0C1C-AFDA-40B6-9228-533D7CD79E63", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1442:*:*:*:*:*:*", "matchCriteriaId": "D516F916-8147-4ECA-9F04-D03F93D4436D", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-281.466:*:*:*:*:*:*", "matchCriteriaId": "F8523FEE-11FB-408D-9051-C42E523FDC0C", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-282.561:*:*:*:*:*:*", "matchCriteriaId": "47E499E4-7A5C-4B0B-B76B-5BCBDDB45B4F", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.562:*:*:*:*:*:*", "matchCriteriaId": "3B45A0DD-1554-4A95-B043-4CB411073ECE", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.565:*:*:*:*:*:*", "matchCriteriaId": "8B997194-209C-4478-9000-A64E8E6CB88C", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.616:*:*:*:*:*:*", "matchCriteriaId": "9516F378-18FB-419A-8B72-E53E74185EFE", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.632:*:*:*:*:*:*", "matchCriteriaId": "6BFDE4F1-0EEE-4A47-A4D9-169CC01EC308", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.633:*:*:*:*:*:*", "matchCriteriaId": "D5695A4F-4103-4B9F-A2BF-7E3E7AE14ED8", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.636:*:*:*:*:*:*", "matchCriteriaId": "1ABC88DD-3E12-486B-B8FE-BFA010E89F10", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-284.636:*:*:*:*:*:*", "matchCriteriaId": "A2B6B012-4F70-41BA-808D-AB002AD3D1CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-285.726:*:*:*:*:*:*", "matchCriteriaId": "13A303DA-DF06-450B-86E3-7FB1C9A38916", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-285.727:*:*:*:*:*:*", "matchCriteriaId": "D47C2DE9-83B8-42C4-9EA1-FCF8055893D6", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-287.727:*:*:*:*:*:*", "matchCriteriaId": "02371487-6C5E-4AA6-B235-F19F36DBB0EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.770:*:*:*:*:*:*", "matchCriteriaId": "5AFA9395-DE7A-49A0-9B14-0E8CF3365E05", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.773:*:*:*:*:*:*", "matchCriteriaId": "AD919AA9-30C7-4329-B643-A0FA15FBEB3E", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.848:*:*:*:*:*:*", "matchCriteriaId": "2F2CB05D-73C1-4506-B922-48AB375B7422", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.849:*:*:*:*:*:*", "matchCriteriaId": "A6A7A298-E1ED-4DEE-AB07-CB764643B90B", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.1020:*:*:*:*:*:*", "matchCriteriaId": "359AC919-EBB5-4ADE-8F41-52E5EFF855F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.1028:*:*:*:*:*:*", "matchCriteriaId": "9E9DC04A-3A67-49E0-9575-77B6632E982B", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.1041:*:*:*:*:*:*", "matchCriteriaId": "61669408-1D65-4366-B183-1F3C16E34553", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.873:*:*:*:*:*:*", "matchCriteriaId": "447C9CFC-38B2-4647-9D66-34620E9131AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.975:*:*:*:*:*:*", "matchCriteriaId": "736BC2BC-5C39-44FB-865F-1BBC25A19F6D", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.976:*:*:*:*:*:*", "matchCriteriaId": "4F733B59-4723-4875-8664-9F6A7861DC47", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-291.1046:*:*:*:*:*:*", "matchCriteriaId": "22503C06-1A81-4096-A4A4-89799469A0CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1046:*:*:*:*:*:*", "matchCriteriaId": "5E6C6658-C7E6-4845-93D1-77CD82459D98", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1055:*:*:*:*:*:*", "matchCriteriaId": "EB307E8D-6BAB-4321-9CE8-BFF1E64D9B63", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1120:*:*:*:*:*:*", "matchCriteriaId": "F09F1761-A875-4448-A92C-FD4A3A8653D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1147:*:*:*:*:*:*", "matchCriteriaId": "A5658F32-07FD-4397-87EA-42E0F721278E", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1148:*:*:*:*:*:*", "matchCriteriaId": "C40922E3-E041-4DC7-91F0-5A50A80B8673", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1156:*:*:*:*:*:*", "matchCriteriaId": "5DC8CACA-7E8F-4F91-9CC4-735D6404230E", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1181:*:*:*:*:*:*", "matchCriteriaId": "2232D71D-43C3-45B3-84A8-897FBC73830E", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1187:*:*:*:*:*:*", "matchCriteriaId": "E5A306EA-E7D1-4BF2-88FB-7CD8E151EE4C", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-293.1189:*:*:*:*:*:*", "matchCriteriaId": "E6B713D8-AE22-4D21-B9B5-743C5BD62300", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-293.1190:*:*:*:*:*:*", "matchCriteriaId": "FCB588BA-2976-4C0F-82ED-D28053314031", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-294.1212:*:*:*:*:*:*", "matchCriteriaId": "EE4AA250-2E44-4F6D-9A95-E857ABC1B9D2", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-294.1285:*:*:*:*:*:*", "matchCriteriaId": "54CFF9E9-33A4-4BE3-89B9-747B854E1A27", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-295.1303:*:*:*:*:*:*", "matchCriteriaId": "57A317A7-0B1C-42EA-A304-69E336829F13", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-296.1392:*:*:*:*:*:*", "matchCriteriaId": "8CF30E03-9D1D-4388-B8CD-942D795C2D76", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-296.1416:*:*:*:*:*:*", "matchCriteriaId": "9BA357ED-183E-4727-816F-2746FE0E5D33", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1416:*:*:*:*:*:*", "matchCriteriaId": "7DDE12DF-A074-487A-8E18-93978B824AF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1474:*:*:*:*:*:*", "matchCriteriaId": "BBAA8949-2000-441B-8B3B-96DEDFCBA718", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1487:*:*:*:*:*:*", "matchCriteriaId": "758ACE0D-3609-425C-BB03-2EFB9875D623", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1511:*:*:*:*:*:*", "matchCriteriaId": "72045EA4-2F37-40EB-9259-9C5AE19961E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1542:*:*:*:*:*:*", "matchCriteriaId": "43DD5F5C-887D-431D-91E0-82CBDF18C3C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1557:*:*:*:*:*:*", "matchCriteriaId": "179B2785-4C98-48CC-92BF-D00D28EA9957", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1596:*:*:*:*:*:*", "matchCriteriaId": "62C9276A-0DBF-4A36-9597-185764C71E57", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1603:*:*:*:*:*:*", "matchCriteriaId": "FB2EC674-22B4-4947-8DAF-DE564553B302", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1606:*:*:*:*:*:*", "matchCriteriaId": "A7281811-A14B-4639-BF65-C817BE2A1510", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1618:*:*:*:*:*:*", "matchCriteriaId": "89DBD1C5-957F-4CE9-82DB-311927B03E7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-300.1666:*:*:*:*:*:*", "matchCriteriaId": "01CE97AE-FE17-42BF-8D89-1808BAA22A77", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-301.1666:*:*:*:*:*:*", "matchCriteriaId": "0D144998-B3DA-454B-B9D0-F239653F2048", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-302.234:*:*:*:*:*:*", "matchCriteriaId": "64B602B6-B2B2-4DC9-90E8-442C09F6B9CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-304.266:*:*:*:*:*:*", "matchCriteriaId": "C39BF44D-9152-440D-918A-F01F0E661A79", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-305.279:*:*:*:*:*:*", "matchCriteriaId": "0219897F-7DFE-4105-80CF-921E8041DB96", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-305.285:*:*:*:*:*:*", "matchCriteriaId": "630F62DA-E447-4EE3-BAF0-06CFDF7348F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-306.288:*:*:*:*:*:*", "matchCriteriaId": "8C69F63C-4E23-4E34-A4D1-98FEA70FF425", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-306.289:*:*:*:*:*:*", "matchCriteriaId": "515618DE-5E42-433A-9C67-1A2CF0BD0D87", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-307.317:*:*:*:*:*:*", "matchCriteriaId": "FF354B6C-E35F-4A96-8BC3-CA0CCFA7BFE1", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.350:*:*:*:*:*:*", "matchCriteriaId": "95CFCF91-BC2E-4A8C-9F3D-B2E83A162EEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.364:*:*:*:*:*:*", "matchCriteriaId": "306C6B11-AEB8-47EE-87DF-1543E04F0009", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.373:*:*:*:*:*:*", "matchCriteriaId": "864293FE-D3F9-45C6-94EA-5F241F067796", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.374:*:*:*:*:*:*", "matchCriteriaId": "D9F5AB3A-3F32-4572-80E3-984856DAAD16", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.418:*:*:*:*:*:*", "matchCriteriaId": "EBF24C01-DD68-4F76-BDA0-B9739A842DF2", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.422:*:*:*:*:*:*", "matchCriteriaId": "BF99F99E-13C5-4E7B-A76D-A6F9300A3E03", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.424:*:*:*:*:*:*", "matchCriteriaId": "94FF23FF-0C1B-4119-819D-F2EE30EF57FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-311.449:*:*:*:*:*:*", "matchCriteriaId": "6FA73CE4-43D7-490E-8A43-0DB3F120E5A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-311.452:*:*:*:*:*:*", "matchCriteriaId": "93F9F52B-F576-4066-91F0-1648CB973A2D", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-311.453:*:*:*:*:*:*", "matchCriteriaId": "8C11ACA8-F25E-424A-955C-88E9D4569D03", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-312.592:*:*:*:*:*:*", "matchCriteriaId": "30663A6A-B137-435F-ADD3-6365344EC7A0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-312.613:*:*:*:*:*:*", "matchCriteriaId": "09F8C200-A991-42A3-8401-050AA91A3459", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-317.613:*:*:*:*:*:*", "matchCriteriaId": "4279D34D-9E75-4141-B6C3-A1B23341794F", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-318.674:*:*:*:*:*:*", "matchCriteriaId": "F80F4FE9-9830-4C85-8C4C-2D766A947A04", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-319.699:*:*:*:*:*:*", "matchCriteriaId": "DF008430-E8C6-42A1-859D-1761EC70AA1E", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-319.723:*:*:*:*:*:*", "matchCriteriaId": "0DBD0AA6-2D95-44A1-92A1-727C9ABFDCE8", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.750:*:*:*:*:*:*", "matchCriteriaId": "38A4E6E6-0B24-47D9-8C0C-A805B3C7B687", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.761:*:*:*:*:*:*", "matchCriteriaId": "D02F8B4F-C49A-4E1B-AF4D-F327412B0246", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.770:*:*:*:*:*:*", "matchCriteriaId": "26C4425C-D4AE-42F4-A6D9-7AA3E7A9FD11", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.780:*:*:*:*:*:*", "matchCriteriaId": "DF8C3945-D172-483F-996C-D338B3B111DA", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.781:*:*:*:*:*:*", "matchCriteriaId": "7F050C7D-25C8-4A76-9BE6-6602C6732967", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.783:*:*:*:*:*:*", "matchCriteriaId": "7232F371-120E-4498-B4F6-5C0BA84FD3B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.831:*:*:*:*:*:*", "matchCriteriaId": "47DEB6D9-108B-4AF6-9B1F-EC7DC3743D55", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.851:*:*:*:*:*:*", "matchCriteriaId": "DF2D1506-37CE-4BE7-B7E0-484BD33F5D1F", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.853:*:*:*:*:*:*", "matchCriteriaId": "F518E0C2-837E-4F01-AD3C-29E65BECD250", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.895:*:*:*:*:*:*", "matchCriteriaId": "25A0135C-3406-4E61-882B-5E5E024531A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.895:*:*:*:*:*:*", "matchCriteriaId": "A1CD978C-0E47-4E41-9FB2-EA9B75A6943B", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.901:*:*:*:*:*:*", "matchCriteriaId": "63740846-D893-4D2B-9830-4BFE02EB9CD4", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.919:*:*:*:*:*:*", "matchCriteriaId": "CCF8C60C-49C9-4825-8D72-11F715160701", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.931:*:*:*:*:*:*", "matchCriteriaId": "25A2AD87-C28A-4E63-AEFC-37FED6D93189", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.934:*:*:*:*:*:*", "matchCriteriaId": "4F3EAB2C-7978-40B7-8760-2D9218BBF53C", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.937:*:*:*:*:*:*", "matchCriteriaId": "CB8DD378-CB65-4330-BA73-2B145871557C", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-322.942:*:*:*:*:*:*", "matchCriteriaId": "987B45DB-7B50-433B-BC84-C3EC515881BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.1030:*:*:*:*:*:*", "matchCriteriaId": "57A85314-1967-4133-B7A1-3813119FBADA", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.1071:*:*:*:*:*:*", "matchCriteriaId": "D42F4D77-053F-49F8-832C-AE5BE76CD166", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.1072:*:*:*:*:*:*", "matchCriteriaId": "34F50847-22C5-4E38-8ABC-71833A4DC5DA", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.947:*:*:*:*:*:*", "matchCriteriaId": "0F25509A-C3F5-444A-BE58-9F591151090E", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-326.1073:*:*:*:*:*:*", "matchCriteriaId": "155CA370-1DC8-4F54-86E9-6C6FC39EEC8D", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.363:*:*:*:*:*:*", "matchCriteriaId": "F0E870DD-77B1-4991-8214-3045C716B829", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.390:*:*:*:*:*:*", "matchCriteriaId": "31B8250F-166E-436C-86C9-B166D9F51174", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.394:*:*:*:*:*:*", "matchCriteriaId": "876B49A3-D774-41BF-B82A-C984653FF747", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.395:*:*:*:*:*:*", "matchCriteriaId": "83E3B1EC-F7C4-47A6-8072-F6B5A7C16C68", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.405:*:*:*:*:*:*", "matchCriteriaId": "952817EA-CF9E-4D94-B46E-CCB2C3C3D1C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.415:*:*:*:*:*:*", "matchCriteriaId": "707AC5FF-83FC-4D96-BC58-8C7E8C5C4B7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.455:*:*:*:*:*:*", "matchCriteriaId": "9CDDB090-B055-462B-96D9-B05620AED9F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.466:*:*:*:*:*:*", "matchCriteriaId": "2733B7FF-093C-4DB8-8031-066D7E3567DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.471:*:*:*:*:*:*", "matchCriteriaId": "F63F0736-12CC-4344-8ECD-E1973BB1CCEB", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-341.475:*:*:*:*:*:*", "matchCriteriaId": "849FAAB5-4222-4FBA-876C-3312CC7803F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-342.482:*:*:*:*:*:*", "matchCriteriaId": "1BE6D285-42D0-4024-A25A-7D584E1CF052", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.495:*:*:*:*:*:*", "matchCriteriaId": "E9D85731-4353-452E-97EF-FA7EC68BDE0C", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.503:*:*:*:*:*:*", "matchCriteriaId": "220E82EF-4AC0-4459-B8D6-A600138E3462", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.561:*:*:*:*:*:*", "matchCriteriaId": "A30FA493-C83D-4E7A-8540-CF00D943065F", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.564:*:*:*:*:*:*", "matchCriteriaId": "222D33C0-E9D8-4F9F-99BE-EC27C8DB3D2B", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.591:*:*:*:*:*:*", "matchCriteriaId": "677A3845-FB85-4961-BCDF-10442D10F57F", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.608:*:*:*:*:*:*", "matchCriteriaId": "31508926-1A97-4338-9F98-B5747F67F568", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.641:*:*:*:*:*:*", "matchCriteriaId": "B383E20A-19E3-405E-938C-86D51A2D4856", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.655:*:*:*:*:*:*", "matchCriteriaId": "04DB4AD7-19F4-42FF-9D79-383AD773A0BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.672:*:*:*:*:*:*", "matchCriteriaId": "9BA28B3B-923F-43FB-9528-06F3E151ECD0", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-345.673:*:*:*:*:*:*", "matchCriteriaId": "03CA5120-0866-492D-B198-1345BAB13ABB", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-346.792:*:*:*:*:*:*", "matchCriteriaId": "7B0FA010-1F5E-406D-A0A9-6A631D4EB308", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-345.233:*:*:*:*:*:*", "matchCriteriaId": "C24BF2C0-1492-42C9-8E7E-2B68B071C1B9", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-346.274:*:*:*:*:*:*", "matchCriteriaId": "0016CF83-721C-4980-ADAE-F5209B5E7011", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-346.287:*:*:*:*:*:*", "matchCriteriaId": "40BB8A3F-15AA-449A-A56B-33FE2EE1ED31", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.299:*:*:*:*:*:*", "matchCriteriaId": "8454C417-0063-490A-B29B-BCFE54D20310", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.338:*:*:*:*:*:*", "matchCriteriaId": "58639E20-9E1F-4E87-9E8D-9EDBF798E7FC", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.362:*:*:*:*:*:*", "matchCriteriaId": "34135E7F-F23B-4A42-9CA7-5CACE872D1C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.405:*:*:*:*:*:*", "matchCriteriaId": "1707E7E0-8B91-40A1-82ED-753DBC632819", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.419:*:*:*:*:*:*", "matchCriteriaId": "5A92CCCE-3BBE-4201-9B98-3876CEDF8492", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.431:*:*:*:*:*:*", "matchCriteriaId": "27415EED-4427-43E8-A64D-669C2F00439A", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.449:*:*:*:*:*:*", "matchCriteriaId": "61CEE1D7-7762-4A6B-A1C9-1101D26E75E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-348.519:*:*:*:*:*:*", "matchCriteriaId": "6B5AE8AE-3DA3-4C24-B5E2-17CA6D9BDC0F", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:kubernetes_ingress_controller:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "2DA4225D-ADCF-46CD-9B46-4BF13D0886E6", "versionEndExcluding": "1.9.14-ee7", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:kubernetes_ingress_controller:*:*:*:*:community:*:*:*", "matchCriteriaId": "6446517C-6F8D-42F4-BFFD-517D5F2281D1", "versionEndExcluding": "3.1.12", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:kubernetes_ingress_controller:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "D8664D8A-55B0-4F94-ABF0-62ED0F841DD5", "versionEndExcluding": "1.11.12-ee10", "versionStartIncluding": "1.10.10-ee1", "vulnerable": true}, {"criteria": "cpe:2.3:a:haproxy:kubernetes_ingress_controller:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "51A4F3A3-0AFF-42B8-83A3-586D50B41F37", "versionEndExcluding": "3.0.15-ee4", "versionStartIncluding": "3.0.0-ee1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests."}, {"lang": "es", "value": "La complejidad algor\u00edtmica ineficiente en mjson en HAProxy permite a atacantes remotos causar una denegaci\u00f3n de servicio a trav\u00e9s de solicitudes JSON especialmente dise\u00f1adas."}], "id": "CVE-2025-11230", "lastModified": "2026-10-18T20:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@ubuntu.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11230", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-19T17:06:27.675545Z", "version": "2.0.3"}}]}, "published": "2025-11-19T10:15:45.020", "references": [{"source": "security@ubuntu.com", "tags": ["Vendor Advisory"], "url": "https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability"}], "sourceIdentifier": "security@ubuntu.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-407"}], "source": "security@ubuntu.com", "type": "Secondary"}]}

{"bugzilla": {"description": "haproxy: denial of service vulnerability in HAProxy mjson library", "id": "2413003", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2413003"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-407", "details": ["A flaw was found in haproxy. A stemming from an inefficient algorithmic complexity issue within its bundled mjson parsing library. This vulnerability is triggered when haproxy is configured to analyze JSON content, such as with the json_query or jwt_payload_query function"], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2025-11230", "package_state": [{"cpe": "cpe:/a:redhat:ceph_storage:5", "fix_state": "Affected", "package_name": "haproxy", "product_name": "Red Hat Ceph Storage 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "haproxy", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "haproxy", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "haproxy", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "haproxy", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "haproxy", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2025-10-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-11230\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-11230"], "threat_severity": "Important"}

{"created": "2025-11-24T09:10:42.142167+00:00", "updated": "2025-11-24T09:10:42.142194+00:00", "vendors": ["haproxy", "haproxy$PRODUCT$haproxy"]}