CVE-2025-32464
Fixed in a distro release EPSS <1%CVSS 6.8
HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.
Products: haproxy
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | haproxy-2.2 | 2.2.34-r0 |
| Chainguard | haproxy-2.2-doc | 2.2.34-r0 |
| Chainguard | haproxy-2.2-iamguarded-compat | 2.2.34-r0 |
| Chainguard | haproxy-2.2-oci-entrypoint | 2.2.34-r0 |
| Chainguard | haproxy-2.4 | 2.4.30-r0 |
| Chainguard | haproxy-2.4-doc | 2.4.27-r45 |
| Chainguard | haproxy-2.4-iamguarded-compat | 2.4.27-r45 |
| Chainguard | haproxy-2.4-nocaps | 2.4.27-r46 |
| Chainguard | haproxy-2.4-oci-entrypoint | 2.4.27-r46 |
| Chainguard | haproxy-2.6 | 2.6.23-r0 |
| Chainguard | haproxy-2.6-doc | 2.6.20-r45 |
| Chainguard | haproxy-2.6-iamguarded-compat | 2.6.20-r45 |
| Chainguard | haproxy-2.6-nocaps | 2.6.20-r46 |
| Chainguard | haproxy-2.6-oci-entrypoint | 2.6.20-r45 |
| Chainguard | haproxy-2.8 | 2.8.18-r0 |
| Chainguard | haproxy-2.8-doc | 2.8.13-r46 |
| Chainguard | haproxy-2.8-iamguarded-compat | 2.8.13-r45 |
| Chainguard | haproxy-2.8-nocaps | 2.8.13-r46 |
| Chainguard | haproxy-2.8-oci-entrypoint | 2.8.13-r45 |
| Chainguard | haproxy-3.0 | 3.0.10-r0 |
| Chainguard | haproxy-3.0-doc | 3.0.10-r0 |
| Chainguard | haproxy-3.0-iamguarded-compat | 3.0.10-r0 |
| Chainguard | haproxy-3.0-nocaps | 3.0.10-r0 |
| Chainguard | haproxy-3.0-oci-entrypoint | 3.0.10-r0 |
| Chainguard | haproxy-3.1 | 3.1.7-r0 |
| Chainguard | haproxy-3.1-doc | 3.1.7-r0 |
| Chainguard | haproxy-3.1-iamguarded-compat | 3.1.7-r0 |
| Chainguard | haproxy-3.1-nocaps | 3.1.7-r0 |
| Chainguard | haproxy-3.1-oci-entrypoint | 3.1.7-r0 |
| Debian 11 | haproxy | 2.2.9-2+deb11u7 |
| Debian 12 | haproxy | 2.6.12-1+deb12u2 |
| Debian 13 | haproxy | 3.0.10-1 |
| Debian 14 | haproxy | 3.0.10-1 |
| SUSE Linux Enterprise High Availability Extension 15 SP4 | haproxy | 2.4.22+git0.f8e3218e2-150400.3.22.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP5 | haproxy | 2.4.22+git0.f8e3218e2-150400.3.22.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP6 | haproxy | 2.8.11+git0.01c1056a4-150600.3.6.1 |
| SUSE Linux Enterprise Micro 5.3 | haproxy | 2.4.22+git0.f8e3218e2-150400.3.22.1 |
| SUSE Linux Enterprise Micro 5.4 | haproxy | 2.4.22+git0.f8e3218e2-150400.3.22.1 |
| SUSE Linux Enterprise Micro 5.5 | haproxy | 2.4.22+git0.f8e3218e2-150400.3.22.1 |
| Ubuntu 22.04 LTS | haproxy | 2.4.24-0ubuntu0.22.04.2 |
| Ubuntu 24.04 LTS | haproxy | 2.8.5-1ubuntu3.3 |
| Ubuntu 25.04 | haproxy | 3.0.8-1ubuntu1.1 |
| Wolfi | haproxy-3.0 | 3.0.10-r0 |
| Wolfi | haproxy-3.0-doc | 3.0.10-r0 |
| Wolfi | haproxy-3.0-oci-entrypoint | 3.0.10-r0 |
| Wolfi | haproxy-3.1 | 3.1.7-r0 |
| Wolfi | haproxy-3.1-doc | 3.1.7-r0 |
| Wolfi | haproxy-3.1-oci-entrypoint | 3.1.7-r0 |
| openSUSE Leap 15.6 | haproxy | 2.8.11+git0.01c1056a4-150600.3.6.1 |
| openSUSE Tumbleweed | haproxy | 3.2.0+git0.e134140d2-2.1 |