CVE-2025-11230 (GCVE-0-2025-11230)

Vulnerability from cvelistv5 – Published: 2025-11-19 09:28 – Updated: 2025-11-19 17:09
VLAI
Title
Denial of service vulnerability in HAProxy mjson library
Summary
Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
  • CWE-407 - Inefficient Algorithmic Complexity
Assigner
References
Impacted products
Vendor Product Version
HAProxy Technologies HAProxy Community Edition Affected: 2.4.0 , < 2.4.30 (semver)
Affected: 2.6.0 , < 2.6.23 (semver)
Affected: 2.8.0 , < 2.8.16 (semver)
Affected: 3.0.0 , < 3.0.12 (semver)
Affected: 3.1.0 , < 3.1.9 (semver)
Affected: 3.2.0 , < 3.2.6 (semver)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-11230",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-19T17:06:27.675545Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-19T17:09:15.642Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "HAProxy Community Edition",
          "programFiles": [
            "src/mjson.c"
          ],
          "repo": "https://git.haproxy.org/",
          "vendor": "HAProxy Technologies",
          "versions": [
            {
              "lessThan": "2.4.30",
              "status": "affected",
              "version": "2.4.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.6.23",
              "status": "affected",
              "version": "2.6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.8.16",
              "status": "affected",
              "version": "2.8.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.0.12",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1.9",
              "status": "affected",
              "version": "3.1.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.2.6",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests."
            }
          ],
          "value": "Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-130",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-130 Excessive Allocation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407 Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-19T09:28:39.750Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "url": "https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Denial of service vulnerability in HAProxy mjson library"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2025-11230",
    "datePublished": "2025-11-19T09:28:39.750Z",
    "dateReserved": "2025-10-01T13:10:26.249Z",
    "dateUpdated": "2025-11-19T17:09:15.642Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-11230",
      "date": "2026-05-30",
      "epss": "0.00468",
      "percentile": "0.64797"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-11230\",\"sourceIdentifier\":\"security@ubuntu.com\",\"published\":\"2025-11-19T10:15:45.020\",\"lastModified\":\"2025-12-19T16:44:55.433\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security@ubuntu.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"security@ubuntu.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-407\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:aloha_appliance:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"14.5.0\",\"versionEndExcluding\":\"14.5.33\",\"matchCriteriaId\":\"89F5C682-A34A-4B37-A271-8692708B61A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:aloha_appliance:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"15.5.0\",\"versionEndExcluding\":\"15.5.28\",\"matchCriteriaId\":\"C09F7887-BC26-4228-8CC3-F50ADB5A57A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:aloha_appliance:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"16.5.0\",\"versionEndExcluding\":\"16.5.19\",\"matchCriteriaId\":\"C3138FAF-4B62-473C-8CC5-12FAA99BF7D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:aloha_appliance:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"17.0.0\",\"versionEndExcluding\":\"17.0.7\",\"matchCriteriaId\":\"C5B4D993-4C11-4D32-A071-4E96D54E6067\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.4.0\",\"versionEndExcluding\":\"2.4.30\",\"matchCriteriaId\":\"29441137-F078-48A2-9222-4B3BB210CE5C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.0\",\"versionEndExcluding\":\"2.6.23\",\"matchCriteriaId\":\"68DBA1BA-AAA7-4105-8FE4-3997D8739D9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.8.0\",\"versionEndExcluding\":\"2.8.16\",\"matchCriteriaId\":\"D2E3634B-D997-4F5A-B163-715204FF5E9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.0.0\",\"versionEndExcluding\":\"3.0.12\",\"matchCriteriaId\":\"87B62C89-3578-4A51-9BF6-AA796EE7B0BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.1.0\",\"versionEndExcluding\":\"3.1.9\",\"matchCriteriaId\":\"0FD13450-6260-49B9-A9B1-6C2D17146FCA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.2.0\",\"versionEndExcluding\":\"3.2.6\",\"matchCriteriaId\":\"957368C8-D147-4EAE-AC22-5F6660BC6998\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-253.271:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0E40014-EA6C-4521-89D7-0FB722261501\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-254.271:*:*:*:*:*:*\",\"matchCriteriaId\":\"25380A20-831C-4494-8659-103375D1074F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-259.342:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC635BE1-161A-453B-A5DE-F30079E41273\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-263.343:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F705DCD-2A71-4A5F-8C43-AC2F3E398B05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-264.356:*:*:*:*:*:*\",\"matchCriteriaId\":\"35DFC7FB-EE31-475C-AEBA-273089521A93\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.356:*:*:*:*:*:*\",\"matchCriteriaId\":\"2AC3898A-4194-4896-A135-BD0DE9928291\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.373:*:*:*:*:*:*\",\"matchCriteriaId\":\"D73FBC8F-DB12-4C7F-9242-4A42CD56AD38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.459:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0E7CC9E-F8A6-4F36-A3DE-CF5C109E8AC1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.464:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB408D95-D8B8-42B4-9FA0-C83444D87863\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.477:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5F2AD1B-5A01-4528-8059-F34BAD131203\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.499:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD1DAB21-6F47-40B1-8AA3-170DDBF52B77\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.553:*:*:*:*:*:*\",\"matchCriteriaId\":\"3551672D-118B-4948-9EF5-3B270C3AEFB8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.560:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B7C7B03-DE43-4D6F-8E5D-25EF0E3EA129\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.564:*:*:*:*:*:*\",\"matchCriteriaId\":\"781A150F-5CBF-468A-880B-116056F52356\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-268.596:*:*:*:*:*:*\",\"matchCriteriaId\":\"1397D597-10D1-412E-B7E8-F533F7367FEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-269.596:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2B374DA-EF98-4CAF-94C7-4DC9C0FE6284\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-269.599:*:*:*:*:*:*\",\"matchCriteriaId\":\"41078FD3-B2A3-4C80-ABA1-0DAB1BD916C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-270.616:*:*:*:*:*:*\",\"matchCriteriaId\":\"03E4E4FC-E5E3-43C4-B478-DB79931EB61F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-271.673:*:*:*:*:*:*\",\"matchCriteriaId\":\"570E32DC-7B04-4397-8368-533D38BF236C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-271.677:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1061325-D6F4-4249-82AA-D09A95E7DE18\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-272.683:*:*:*:*:*:*\",\"matchCriteriaId\":\"3997AB00-517B-4F06-AFF8-58E860A1A15D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-272.686:*:*:*:*:*:*\",\"matchCriteriaId\":\"80A5164F-7BE0-493F-9C1C-6C39C5AED25E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-272.728:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F3BC464-9C9D-4E37-A917-82455EF8B05D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-274.752:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D650CA1-6B4E-4404-BBB8-3866016037AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-276.752:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A088706-69A1-49B1-ACA6-5B7641B844B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-277.814:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA569475-70D0-429E-9B46-8ED4AE06AA2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-277.831:*:*:*:*:*:*\",\"matchCriteriaId\":\"683A33A3-9A91-4705-B317-41F907F5AE7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-278.838:*:*:*:*:*:*\",\"matchCriteriaId\":\"28B08E75-EDCC-4A7A-ABA5-56F5E20393CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.852:*:*:*:*:*:*\",\"matchCriteriaId\":\"51E28850-4435-42CB-AFCA-5318E995CC6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.859:*:*:*:*:*:*\",\"matchCriteriaId\":\"6896BE09-0263-44E0-9670-0A332BFBA456\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.877:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF03C76B-878C-46C9-827C-1FC203725E33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.911:*:*:*:*:*:*\",\"matchCriteriaId\":\"B6955936-7042-474C-B57F-6EBDFC7776FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.940:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4FF2C8A-2B3C-4811-83FB-FDBCBDF7B329\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.952:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C259A1C-700D-4831-8A8D-477B3BE84A09\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.953:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C629869-526F-45D2-813B-05B10474D7DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-279.956:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3D6B0B6-4EF0-461D-9A78-4488A0607049\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-280.956:*:*:*:*:*:*\",\"matchCriteriaId\":\"94C10C56-6F8C-4E8A-A8CD-1E70B873CA03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-282.998:*:*:*:*:*:*\",\"matchCriteriaId\":\"50E7AE42-62EA-4463-A00B-F8BB01C36AE8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-282.999:*:*:*:*:*:*\",\"matchCriteriaId\":\"A681FB96-21FF-4F0D-8557-DF823F101E98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-284.999:*:*:*:*:*:*\",\"matchCriteriaId\":\"52FC716A-2571-4B82-AEA6-6410C5D569FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-285.1010:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CCA23CA-F7AC-4469-9097-E4E3BC0508B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1064:*:*:*:*:*:*\",\"matchCriteriaId\":\"B02A78D5-7E8B-4929-BD5A-FE45BBA75D0D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1068:*:*:*:*:*:*\",\"matchCriteriaId\":\"413074E3-D4CE-4E7F-A716-141466DE8742\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1089:*:*:*:*:*:*\",\"matchCriteriaId\":\"E90762B6-200C-494F-8D94-54835D5E88CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-286.1094:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB4AFA16-7891-4032-9BAB-0A275414DC81\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1094:*:*:*:*:*:*\",\"matchCriteriaId\":\"A26C9E99-9A5E-457A-B16E-BF23053E6C54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1158:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E9C12FE-31F5-4D17-B0AB-AD63CE3F0A8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1167:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F29D6B3-E5BB-4A39-9E16-4ED6950A58F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-288.1189:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC80D676-1A6C-4D36-96BD-822A1EE8E8E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-289.1189:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B27E12F-158B-4E29-B5CE-779703267D16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-290.1239:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA0970BF-BF54-4139-A645-151AFD2A2BD5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-291.1246:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3BF7368-2201-4E8B-B8E7-A0FF8F47BDF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-292.1293:*:*:*:*:*:*\",\"matchCriteriaId\":\"83C04DB5-6319-4B48-9898-616699A47CDD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1346:*:*:*:*:*:*\",\"matchCriteriaId\":\"52EE47D5-3FBD-4A2E-88C7-812A6E721D5C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1364:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D6A7C69-2D78-4B3D-B994-7A65A3325694\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1376:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE787108-59AF-4BC8-977C-06FE5FE5B755\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1377:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE5D0C1C-AFDA-40B6-9228-533D7CD79E63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.4r1:1.0.0-294.1442:*:*:*:*:*:*\",\"matchCriteriaId\":\"D516F916-8147-4ECA-9F04-D03F93D4436D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-281.466:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8523FEE-11FB-408D-9051-C42E523FDC0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-282.561:*:*:*:*:*:*\",\"matchCriteriaId\":\"47E499E4-7A5C-4B0B-B76B-5BCBDDB45B4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.562:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B45A0DD-1554-4A95-B043-4CB411073ECE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.565:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B997194-209C-4478-9000-A64E8E6CB88C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.616:*:*:*:*:*:*\",\"matchCriteriaId\":\"9516F378-18FB-419A-8B72-E53E74185EFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.632:*:*:*:*:*:*\",\"matchCriteriaId\":\"6BFDE4F1-0EEE-4A47-A4D9-169CC01EC308\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.633:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5695A4F-4103-4B9F-A2BF-7E3E7AE14ED8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-283.636:*:*:*:*:*:*\",\"matchCriteriaId\":\"1ABC88DD-3E12-486B-B8FE-BFA010E89F10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-284.636:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2B6B012-4F70-41BA-808D-AB002AD3D1CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-285.726:*:*:*:*:*:*\",\"matchCriteriaId\":\"13A303DA-DF06-450B-86E3-7FB1C9A38916\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-285.727:*:*:*:*:*:*\",\"matchCriteriaId\":\"D47C2DE9-83B8-42C4-9EA1-FCF8055893D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-287.727:*:*:*:*:*:*\",\"matchCriteriaId\":\"02371487-6C5E-4AA6-B235-F19F36DBB0EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.770:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AFA9395-DE7A-49A0-9B14-0E8CF3365E05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.773:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD919AA9-30C7-4329-B643-A0FA15FBEB3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.848:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F2CB05D-73C1-4506-B922-48AB375B7422\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-288.849:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6A7A298-E1ED-4DEE-AB07-CB764643B90B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.1020:*:*:*:*:*:*\",\"matchCriteriaId\":\"359AC919-EBB5-4ADE-8F41-52E5EFF855F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.1028:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E9DC04A-3A67-49E0-9575-77B6632E982B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.1041:*:*:*:*:*:*\",\"matchCriteriaId\":\"61669408-1D65-4366-B183-1F3C16E34553\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.873:*:*:*:*:*:*\",\"matchCriteriaId\":\"447C9CFC-38B2-4647-9D66-34620E9131AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.975:*:*:*:*:*:*\",\"matchCriteriaId\":\"736BC2BC-5C39-44FB-865F-1BBC25A19F6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-289.976:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F733B59-4723-4875-8664-9F6A7861DC47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-291.1046:*:*:*:*:*:*\",\"matchCriteriaId\":\"22503C06-1A81-4096-A4A4-89799469A0CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1046:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E6C6658-C7E6-4845-93D1-77CD82459D98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1055:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB307E8D-6BAB-4321-9CE8-BFF1E64D9B63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1120:*:*:*:*:*:*\",\"matchCriteriaId\":\"F09F1761-A875-4448-A92C-FD4A3A8653D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1147:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5658F32-07FD-4397-87EA-42E0F721278E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1148:*:*:*:*:*:*\",\"matchCriteriaId\":\"C40922E3-E041-4DC7-91F0-5A50A80B8673\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1156:*:*:*:*:*:*\",\"matchCriteriaId\":\"5DC8CACA-7E8F-4F91-9CC4-735D6404230E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1181:*:*:*:*:*:*\",\"matchCriteriaId\":\"2232D71D-43C3-45B3-84A8-897FBC73830E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-292.1187:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5A306EA-E7D1-4BF2-88FB-7CD8E151EE4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-293.1189:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6B713D8-AE22-4D21-B9B5-743C5BD62300\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-293.1190:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCB588BA-2976-4C0F-82ED-D28053314031\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-294.1212:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE4AA250-2E44-4F6D-9A95-E857ABC1B9D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-294.1285:*:*:*:*:*:*\",\"matchCriteriaId\":\"54CFF9E9-33A4-4BE3-89B9-747B854E1A27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-295.1303:*:*:*:*:*:*\",\"matchCriteriaId\":\"57A317A7-0B1C-42EA-A304-69E336829F13\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-296.1392:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CF30E03-9D1D-4388-B8CD-942D795C2D76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-296.1416:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BA357ED-183E-4727-816F-2746FE0E5D33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1416:*:*:*:*:*:*\",\"matchCriteriaId\":\"7DDE12DF-A074-487A-8E18-93978B824AF7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1474:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBAA8949-2000-441B-8B3B-96DEDFCBA718\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1487:*:*:*:*:*:*\",\"matchCriteriaId\":\"758ACE0D-3609-425C-BB03-2EFB9875D623\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1511:*:*:*:*:*:*\",\"matchCriteriaId\":\"72045EA4-2F37-40EB-9259-9C5AE19961E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1542:*:*:*:*:*:*\",\"matchCriteriaId\":\"43DD5F5C-887D-431D-91E0-82CBDF18C3C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1557:*:*:*:*:*:*\",\"matchCriteriaId\":\"179B2785-4C98-48CC-92BF-D00D28EA9957\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1596:*:*:*:*:*:*\",\"matchCriteriaId\":\"62C9276A-0DBF-4A36-9597-185764C71E57\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1603:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB2EC674-22B4-4947-8DAF-DE564553B302\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1606:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7281811-A14B-4639-BF65-C817BE2A1510\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-299.1618:*:*:*:*:*:*\",\"matchCriteriaId\":\"89DBD1C5-957F-4CE9-82DB-311927B03E7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-300.1666:*:*:*:*:*:*\",\"matchCriteriaId\":\"01CE97AE-FE17-42BF-8D89-1808BAA22A77\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.6r1:1.0.0-301.1666:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D144998-B3DA-454B-B9D0-F239653F2048\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-302.234:*:*:*:*:*:*\",\"matchCriteriaId\":\"64B602B6-B2B2-4DC9-90E8-442C09F6B9CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-304.266:*:*:*:*:*:*\",\"matchCriteriaId\":\"C39BF44D-9152-440D-918A-F01F0E661A79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-305.279:*:*:*:*:*:*\",\"matchCriteriaId\":\"0219897F-7DFE-4105-80CF-921E8041DB96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-305.285:*:*:*:*:*:*\",\"matchCriteriaId\":\"630F62DA-E447-4EE3-BAF0-06CFDF7348F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-306.288:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C69F63C-4E23-4E34-A4D1-98FEA70FF425\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-306.289:*:*:*:*:*:*\",\"matchCriteriaId\":\"515618DE-5E42-433A-9C67-1A2CF0BD0D87\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-307.317:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF354B6C-E35F-4A96-8BC3-CA0CCFA7BFE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.350:*:*:*:*:*:*\",\"matchCriteriaId\":\"95CFCF91-BC2E-4A8C-9F3D-B2E83A162EEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.364:*:*:*:*:*:*\",\"matchCriteriaId\":\"306C6B11-AEB8-47EE-87DF-1543E04F0009\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.373:*:*:*:*:*:*\",\"matchCriteriaId\":\"864293FE-D3F9-45C6-94EA-5F241F067796\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.374:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9F5AB3A-3F32-4572-80E3-984856DAAD16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.418:*:*:*:*:*:*\",\"matchCriteriaId\":\"EBF24C01-DD68-4F76-BDA0-B9739A842DF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.422:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF99F99E-13C5-4E7B-A76D-A6F9300A3E03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-310.424:*:*:*:*:*:*\",\"matchCriteriaId\":\"94FF23FF-0C1B-4119-819D-F2EE30EF57FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-311.449:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FA73CE4-43D7-490E-8A43-0DB3F120E5A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-311.452:*:*:*:*:*:*\",\"matchCriteriaId\":\"93F9F52B-F576-4066-91F0-1648CB973A2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-311.453:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C11ACA8-F25E-424A-955C-88E9D4569D03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-312.592:*:*:*:*:*:*\",\"matchCriteriaId\":\"30663A6A-B137-435F-ADD3-6365344EC7A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-312.613:*:*:*:*:*:*\",\"matchCriteriaId\":\"09F8C200-A991-42A3-8401-050AA91A3459\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-317.613:*:*:*:*:*:*\",\"matchCriteriaId\":\"4279D34D-9E75-4141-B6C3-A1B23341794F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-318.674:*:*:*:*:*:*\",\"matchCriteriaId\":\"F80F4FE9-9830-4C85-8C4C-2D766A947A04\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-319.699:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF008430-E8C6-42A1-859D-1761EC70AA1E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-319.723:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DBD0AA6-2D95-44A1-92A1-727C9ABFDCE8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.750:*:*:*:*:*:*\",\"matchCriteriaId\":\"38A4E6E6-0B24-47D9-8C0C-A805B3C7B687\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.761:*:*:*:*:*:*\",\"matchCriteriaId\":\"D02F8B4F-C49A-4E1B-AF4D-F327412B0246\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.770:*:*:*:*:*:*\",\"matchCriteriaId\":\"26C4425C-D4AE-42F4-A6D9-7AA3E7A9FD11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.780:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF8C3945-D172-483F-996C-D338B3B111DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.781:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F050C7D-25C8-4A76-9BE6-6602C6732967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.783:*:*:*:*:*:*\",\"matchCriteriaId\":\"7232F371-120E-4498-B4F6-5C0BA84FD3B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.831:*:*:*:*:*:*\",\"matchCriteriaId\":\"47DEB6D9-108B-4AF6-9B1F-EC7DC3743D55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.851:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF2D1506-37CE-4BE7-B7E0-484BD33F5D1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.853:*:*:*:*:*:*\",\"matchCriteriaId\":\"F518E0C2-837E-4F01-AD3C-29E65BECD250\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-320.895:*:*:*:*:*:*\",\"matchCriteriaId\":\"25A0135C-3406-4E61-882B-5E5E024531A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.895:*:*:*:*:*:*\",\"matchCriteriaId\":\"A1CD978C-0E47-4E41-9FB2-EA9B75A6943B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.901:*:*:*:*:*:*\",\"matchCriteriaId\":\"63740846-D893-4D2B-9830-4BFE02EB9CD4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.919:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCF8C60C-49C9-4825-8D72-11F715160701\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.931:*:*:*:*:*:*\",\"matchCriteriaId\":\"25A2AD87-C28A-4E63-AEFC-37FED6D93189\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.934:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F3EAB2C-7978-40B7-8760-2D9218BBF53C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-321.937:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB8DD378-CB65-4330-BA73-2B145871557C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-322.942:*:*:*:*:*:*\",\"matchCriteriaId\":\"987B45DB-7B50-433B-BC84-C3EC515881BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.1030:*:*:*:*:*:*\",\"matchCriteriaId\":\"57A85314-1967-4133-B7A1-3813119FBADA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.1071:*:*:*:*:*:*\",\"matchCriteriaId\":\"D42F4D77-053F-49F8-832C-AE5BE76CD166\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.1072:*:*:*:*:*:*\",\"matchCriteriaId\":\"34F50847-22C5-4E38-8ABC-71833A4DC5DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-324.947:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F25509A-C3F5-444A-BE58-9F591151090E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:2.8r1:1.0.0-326.1073:*:*:*:*:*:*\",\"matchCriteriaId\":\"155CA370-1DC8-4F54-86E9-6C6FC39EEC8D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.363:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0E870DD-77B1-4991-8214-3045C716B829\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.390:*:*:*:*:*:*\",\"matchCriteriaId\":\"31B8250F-166E-436C-86C9-B166D9F51174\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-337.394:*:*:*:*:*:*\",\"matchCriteriaId\":\"876B49A3-D774-41BF-B82A-C984653FF747\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.395:*:*:*:*:*:*\",\"matchCriteriaId\":\"83E3B1EC-F7C4-47A6-8072-F6B5A7C16C68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.405:*:*:*:*:*:*\",\"matchCriteriaId\":\"952817EA-CF9E-4D94-B46E-CCB2C3C3D1C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.415:*:*:*:*:*:*\",\"matchCriteriaId\":\"707AC5FF-83FC-4D96-BC58-8C7E8C5C4B7E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.455:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CDDB090-B055-462B-96D9-B05620AED9F6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.466:*:*:*:*:*:*\",\"matchCriteriaId\":\"2733B7FF-093C-4DB8-8031-066D7E3567DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-339.471:*:*:*:*:*:*\",\"matchCriteriaId\":\"F63F0736-12CC-4344-8ECD-E1973BB1CCEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-341.475:*:*:*:*:*:*\",\"matchCriteriaId\":\"849FAAB5-4222-4FBA-876C-3312CC7803F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-342.482:*:*:*:*:*:*\",\"matchCriteriaId\":\"1BE6D285-42D0-4024-A25A-7D584E1CF052\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.495:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9D85731-4353-452E-97EF-FA7EC68BDE0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.503:*:*:*:*:*:*\",\"matchCriteriaId\":\"220E82EF-4AC0-4459-B8D6-A600138E3462\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.561:*:*:*:*:*:*\",\"matchCriteriaId\":\"A30FA493-C83D-4E7A-8540-CF00D943065F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.564:*:*:*:*:*:*\",\"matchCriteriaId\":\"222D33C0-E9D8-4F9F-99BE-EC27C8DB3D2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.591:*:*:*:*:*:*\",\"matchCriteriaId\":\"677A3845-FB85-4961-BCDF-10442D10F57F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.608:*:*:*:*:*:*\",\"matchCriteriaId\":\"31508926-1A97-4338-9F98-B5747F67F568\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.641:*:*:*:*:*:*\",\"matchCriteriaId\":\"B383E20A-19E3-405E-938C-86D51A2D4856\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.655:*:*:*:*:*:*\",\"matchCriteriaId\":\"04DB4AD7-19F4-42FF-9D79-383AD773A0BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-344.672:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BA28B3B-923F-43FB-9528-06F3E151ECD0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-345.673:*:*:*:*:*:*\",\"matchCriteriaId\":\"03CA5120-0866-492D-B198-1345BAB13ABB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.0r1:1.0.0-346.792:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B0FA010-1F5E-406D-A0A9-6A631D4EB308\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-345.233:*:*:*:*:*:*\",\"matchCriteriaId\":\"C24BF2C0-1492-42C9-8E7E-2B68B071C1B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-346.274:*:*:*:*:*:*\",\"matchCriteriaId\":\"0016CF83-721C-4980-ADAE-F5209B5E7011\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-346.287:*:*:*:*:*:*\",\"matchCriteriaId\":\"40BB8A3F-15AA-449A-A56B-33FE2EE1ED31\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.299:*:*:*:*:*:*\",\"matchCriteriaId\":\"8454C417-0063-490A-B29B-BCFE54D20310\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.338:*:*:*:*:*:*\",\"matchCriteriaId\":\"58639E20-9E1F-4E87-9E8D-9EDBF798E7FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.362:*:*:*:*:*:*\",\"matchCriteriaId\":\"34135E7F-F23B-4A42-9CA7-5CACE872D1C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.405:*:*:*:*:*:*\",\"matchCriteriaId\":\"1707E7E0-8B91-40A1-82ED-753DBC632819\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.419:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A92CCCE-3BBE-4201-9B98-3876CEDF8492\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.431:*:*:*:*:*:*\",\"matchCriteriaId\":\"27415EED-4427-43E8-A64D-669C2F00439A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-347.449:*:*:*:*:*:*\",\"matchCriteriaId\":\"61CEE1D7-7762-4A6B-A1C9-1101D26E75E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy_enterprise:3.1r1:1.0.0-348.519:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B5AE8AE-3DA3-4C24-B5E2-17CA6D9BDC0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:kubernetes_ingress_controller:*:*:*:*:enterprise:*:*:*\",\"versionEndExcluding\":\"1.9.14-ee7\",\"matchCriteriaId\":\"2DA4225D-ADCF-46CD-9B46-4BF13D0886E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:kubernetes_ingress_controller:*:*:*:*:community:*:*:*\",\"versionEndExcluding\":\"3.1.12\",\"matchCriteriaId\":\"6446517C-6F8D-42F4-BFFD-517D5F2281D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:kubernetes_ingress_controller:*:*:*:*:enterprise:*:*:*\",\"versionStartIncluding\":\"1.10.10-ee1\",\"versionEndExcluding\":\"1.11.12-ee10\",\"matchCriteriaId\":\"D8664D8A-55B0-4F94-ABF0-62ED0F841DD5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:kubernetes_ingress_controller:*:*:*:*:enterprise:*:*:*\",\"versionStartIncluding\":\"3.0.0-ee1\",\"versionEndExcluding\":\"3.0.15-ee4\",\"matchCriteriaId\":\"51A4F3A3-0AFF-42B8-83A3-586D50B41F37\"}]}]}],\"references\":[{\"url\":\"https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability\",\"source\":\"security@ubuntu.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-11230\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-11-19T17:06:27.675545Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-11-19T17:09:02.607Z\"}}], \"cna\": {\"title\": \"Denial of service vulnerability in HAProxy mjson library\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"impacts\": [{\"capecId\": \"CAPEC-130\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-130 Excessive Allocation\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"repo\": \"https://git.haproxy.org/\", \"vendor\": \"HAProxy Technologies\", \"product\": \"HAProxy Community Edition\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.4.0\", \"lessThan\": \"2.4.30\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"2.6.0\", \"lessThan\": \"2.6.23\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"2.8.0\", \"lessThan\": \"2.8.16\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.0.0\", \"lessThan\": \"3.0.12\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.1.0\", \"lessThan\": \"3.1.9\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.2.0\", \"lessThan\": \"3.2.6\", \"versionType\": \"semver\"}], \"programFiles\": [\"src/mjson.c\"], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-407\", \"description\": \"CWE-407 Inefficient Algorithmic Complexity\"}]}], \"providerMetadata\": {\"orgId\": \"cc1ad9ee-3454-478d-9317-d3e869d708bc\", \"shortName\": \"canonical\", \"dateUpdated\": \"2025-11-19T09:28:39.750Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-11230\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-19T17:09:15.642Z\", \"dateReserved\": \"2025-10-01T13:10:26.249Z\", \"assignerOrgId\": \"cc1ad9ee-3454-478d-9317-d3e869d708bc\", \"datePublished\": \"2025-11-19T09:28:39.750Z\", \"assignerShortName\": \"canonical\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.