CVE-2024-45506

Published: Sep 4, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding (h2_send loop) under a certain set of conditions, as exploited in the wild in 2024.

Affected (8)

Products: Haproxy: Haproxy

Haproxy

1 product

Haproxy

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Haproxy Haproxy	From 2.9.0 to 2.9.10
Haproxy Haproxy	From 3.0.0 to 3.0.4
Haproxy Haproxy	Version 3.1 dev0
Haproxy Haproxy	Version 3.1 dev1
Haproxy Haproxy	Version 3.1 dev2
Haproxy Haproxy	Version 3.1 dev3
Haproxy Haproxy	Version 3.1 dev4
Haproxy Haproxy	Version 3.1 dev5