Yüksek CVSS 7.5
CVE-2025-11230: Aloha Appliance: güvenlik açığı
Açıklama (NVD)
Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.
Özet bilgiler
- Ürün
- Haproxy Aloha Appliance
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,74 (yüzdelik 55)
- CWE
- CWE-407
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| haproxy-aloha-appliance | 14.5.0 | — | 14.5.33 |
| haproxy-aloha-appliance | 15.5.0 | — | 15.5.28 |
| haproxy-aloha-appliance | 16.5.0 | — | 16.5.19 |
| haproxy-aloha-appliance | 17.0.0 | — | 17.0.7 |
| haproxy-haproxy | 2.4.0 | — | 2.4.30 |
| haproxy-haproxy | 2.6.0 | — | 2.6.23 |
| haproxy-haproxy | 2.8.0 | — | 2.8.16 |
| haproxy-haproxy | 3.0.0 | — | 3.0.12 |
| haproxy-haproxy | 3.1.0 | — | 3.1.9 |
| haproxy-haproxy | 3.2.0 | — | 3.2.6 |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |
| haproxy-haproxy-enterprise | 2.4r1 | 2.4r1 | — |