CVE-2025-11230

haproxy aloha appliance, haproxy, haproxy enterprise

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2025-11230

Katalog CVE

CVSS 7.5 · High EPSS 0,69%

Kerentanan Inefficient Algorithmic Complexity pada haproxy aloha appliance, haproxy +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut ubuntu.com.

Deskripsi (NVD)

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

Rincian

Terbit di NVD
19 November 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.5 (High), sumber ubuntu.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-407: Inefficient Algorithmic Complexity
EPSS (30 hari)
0,69% peluang dieksploitasi; lebih tinggi dari 51,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
haproxy aloha appliance Versi 14.5.0 hingga sebelum 14.5.33
haproxy aloha appliance Versi 15.5.0 hingga sebelum 15.5.28
haproxy aloha appliance Versi 16.5.0 hingga sebelum 16.5.19
haproxy aloha appliance Versi 17.0.0 hingga sebelum 17.0.7
haproxy haproxy Versi 2.4.0 hingga sebelum 2.4.30
haproxy haproxy Versi 2.6.0 hingga sebelum 2.6.23
haproxy haproxy Versi 2.8.0 hingga sebelum 2.8.16
haproxy haproxy Versi 3.0.0 hingga sebelum 3.0.12
haproxy haproxy Versi 3.1.0 hingga sebelum 3.1.9
haproxy haproxy Versi 3.2.0 hingga sebelum 3.2.6
haproxy haproxy enterprise Versi 2.4r1 1.0.0-253.271
haproxy haproxy enterprise Versi 2.4r1 1.0.0-254.271
haproxy haproxy enterprise Versi 2.4r1 1.0.0-259.342
haproxy haproxy enterprise Versi 2.4r1 1.0.0-263.343
haproxy haproxy enterprise Versi 2.4r1 1.0.0-264.356
haproxy haproxy enterprise Versi 2.4r1 1.0.0-268.356
haproxy haproxy enterprise Versi 2.4r1 1.0.0-268.373
haproxy haproxy enterprise Versi 2.4r1 1.0.0-268.459
haproxy haproxy enterprise Versi 2.4r1 1.0.0-268.464
haproxy haproxy enterprise Versi 2.4r1 1.0.0-268.477
haproxy haproxy enterprise Versi 2.4r1 1.0.0-268.499
haproxy haproxy enterprise Versi 2.4r1 1.0.0-268.553
haproxy haproxy enterprise Versi 2.4r1 1.0.0-268.560
haproxy haproxy enterprise Versi 2.4r1 1.0.0-268.564
haproxy haproxy enterprise Versi 2.4r1 1.0.0-268.596
haproxy haproxy enterprise Versi 2.4r1 1.0.0-269.596
haproxy haproxy enterprise Versi 2.4r1 1.0.0-269.599
haproxy haproxy enterprise Versi 2.4r1 1.0.0-270.616
haproxy haproxy enterprise Versi 2.4r1 1.0.0-271.673
haproxy haproxy enterprise Versi 2.4r1 1.0.0-271.677
haproxy haproxy enterprise Versi 2.4r1 1.0.0-272.683
haproxy haproxy enterprise Versi 2.4r1 1.0.0-272.686
haproxy haproxy enterprise Versi 2.4r1 1.0.0-272.728
haproxy haproxy enterprise Versi 2.4r1 1.0.0-274.752
haproxy haproxy enterprise Versi 2.4r1 1.0.0-276.752
haproxy haproxy enterprise Versi 2.4r1 1.0.0-277.814
haproxy haproxy enterprise Versi 2.4r1 1.0.0-277.831
haproxy haproxy enterprise Versi 2.4r1 1.0.0-278.838
haproxy haproxy enterprise Versi 2.4r1 1.0.0-279.852
haproxy haproxy enterprise Versi 2.4r1 1.0.0-279.859
haproxy haproxy enterprise Versi 2.4r1 1.0.0-279.877
haproxy haproxy enterprise Versi 2.4r1 1.0.0-279.911
haproxy haproxy enterprise Versi 2.4r1 1.0.0-279.940
haproxy haproxy enterprise Versi 2.4r1 1.0.0-279.952
haproxy haproxy enterprise Versi 2.4r1 1.0.0-279.953
haproxy haproxy enterprise Versi 2.4r1 1.0.0-279.956
haproxy haproxy enterprise Versi 2.4r1 1.0.0-280.956
haproxy haproxy enterprise Versi 2.4r1 1.0.0-282.998
haproxy haproxy enterprise Versi 2.4r1 1.0.0-282.999
haproxy haproxy enterprise Versi 2.4r1 1.0.0-284.999
haproxy haproxy enterprise Versi 2.4r1 1.0.0-285.1010
haproxy haproxy enterprise Versi 2.4r1 1.0.0-286.1064
haproxy haproxy enterprise Versi 2.4r1 1.0.0-286.1068
haproxy haproxy enterprise Versi 2.4r1 1.0.0-286.1089
haproxy haproxy enterprise Versi 2.4r1 1.0.0-286.1094
haproxy haproxy enterprise Versi 2.4r1 1.0.0-288.1094
haproxy haproxy enterprise Versi 2.4r1 1.0.0-288.1158
haproxy haproxy enterprise Versi 2.4r1 1.0.0-288.1167
haproxy haproxy enterprise Versi 2.4r1 1.0.0-288.1189
haproxy haproxy enterprise Versi 2.4r1 1.0.0-289.1189

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 200 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.