USN-4321-1: HAProxy vulnerability
Published Apr 7, 2020
·Updated
Felix Wilhelm discovered that HAProxy incorrectly handled certain HTTP/2 requests. An attacker could possibly use this to execute arbitrary code.
Affected Software
0 affected components
Event History
Feb 23, 2026
Advisory Published
via Ubuntu·06:29 PM
Data Sourced
via Ubuntu·06:29 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this HAProxy vulnerability?
The vulnerability ID for this HAProxy vulnerability is USN-4321-1.
2
What is the severity of the HAProxy vulnerability?
The severity of the HAProxy vulnerability is not specified in the provided information. Please refer to the references for more details.
3
How does an attacker exploit this vulnerability in HAProxy?
An attacker can exploit the HAProxy vulnerability by sending certain malicious HTTP/2 requests.
4
How can I fix this HAProxy vulnerability in Ubuntu 19.10?
To fix this HAProxy vulnerability in Ubuntu 19.10, update the HAProxy package to version 2.0.5-1ubuntu0.4 or later.
5
How can I fix this HAProxy vulnerability in Ubuntu 18.04?
To fix this HAProxy vulnerability in Ubuntu 18.04, update the HAProxy package to version 1.8.8-1ubuntu0.10 or later.