CVE-2025-11230

Published: Nov 19, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: security@ubuntu.com (Secondary)

Description

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

Affected (200)

Products: Haproxy: Aloha Appliance, Haproxy, Haproxy Enterprise, Kubernetes Ingress Controller

4 products

Kubernetes Ingress Controller

Configuration A

200 vulnerable

Vulnerable Software	Affected Versions
Haproxy Aloha Appliance	From 14.5.0 to 14.5.33
Haproxy Aloha Appliance	From 15.5.0 to 15.5.28
Haproxy Aloha Appliance	From 16.5.0 to 16.5.19
Haproxy Aloha Appliance	From 17.0.0 to 17.0.7
Haproxy Haproxy	From 2.4.0 to 2.4.30
Haproxy Haproxy	From 2.6.0 to 2.6.23
Haproxy Haproxy	From 2.8.0 to 2.8.16
Haproxy Haproxy	From 3.0.0 to 3.0.12
Haproxy Haproxy	From 3.1.0 to 3.1.9
Haproxy Haproxy	From 3.2.0 to 3.2.6
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-253.271
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-254.271
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-259.342
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-263.343
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-264.356
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-268.356
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-268.373
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-268.459
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-268.464
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-268.477
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-268.499
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-268.553
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-268.560
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-268.564
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-268.596
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-269.596
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-269.599
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-270.616
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-271.673
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-271.677
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-272.683
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-272.686
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-272.728
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-274.752
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-276.752
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-277.814
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-277.831
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-278.838
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-279.852
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-279.859
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-279.877
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-279.911
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-279.940
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-279.952
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-279.953
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-279.956
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-280.956
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-282.998
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-282.999
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-284.999
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-285.1010
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-286.1064
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-286.1068
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-286.1089
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-286.1094
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-288.1094
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-288.1158
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-288.1167
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-288.1189
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-289.1189
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-290.1239
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-291.1246
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-292.1293
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-294.1346
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-294.1364
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-294.1376
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-294.1377
Haproxy Haproxy Enterprise	Version 2.4r1 1.0.0-294.1442
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-281.466
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-282.561
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-283.562
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-283.565
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-283.616
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-283.632
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-283.633
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-283.636
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-284.636
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-285.726
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-285.727
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-287.727
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-288.770
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-288.773
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-288.848
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-288.849
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-289.1020
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-289.1028
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-289.1041
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-289.873
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-289.975
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-289.976
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-291.1046
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-292.1046
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-292.1055
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-292.1120
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-292.1147
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-292.1148
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-292.1156
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-292.1181
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-292.1187
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-293.1189
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-293.1190
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-294.1212
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-294.1285
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-295.1303
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-296.1392
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-296.1416
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-299.1416
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-299.1474
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-299.1487
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-299.1511
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-299.1542
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-299.1557
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-299.1596
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-299.1603
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-299.1606
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-299.1618
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-300.1666
Haproxy Haproxy Enterprise	Version 2.6r1 1.0.0-301.1666
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-302.234
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-304.266
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-305.279
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-305.285
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-306.288
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-306.289
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-307.317
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-310.350
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-310.364
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-310.373
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-310.374
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-310.418
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-310.422
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-310.424
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-311.449
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-311.452
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-311.453
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-312.592
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-312.613
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-317.613
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-318.674
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-319.699
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-319.723
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-320.750
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-320.761
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-320.770
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-320.780
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-320.781
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-320.783
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-320.831
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-320.851
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-320.853
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-320.895
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-321.895
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-321.901
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-321.919
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-321.931
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-321.934
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-321.937
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-322.942
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-324.1030
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-324.1071
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-324.1072
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-324.947
Haproxy Haproxy Enterprise	Version 2.8r1 1.0.0-326.1073
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-337.363
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-337.390
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-337.394
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.395
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.405
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.415
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.455
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.466
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-339.471
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-341.475
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-342.482
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.495
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.503
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.561
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.564
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.591
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.608
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.641
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.655
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-344.672
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-345.673
Haproxy Haproxy Enterprise	Version 3.0r1 1.0.0-346.792
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-345.233
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-346.274
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-346.287
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.299
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.338
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.362
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.405
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.419
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.431
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-347.449
Haproxy Haproxy Enterprise	Version 3.1r1 1.0.0-348.519
Haproxy Kubernetes Ingress Controller	Before 3.1.12
Haproxy Kubernetes Ingress Controller	Before 1.9.14-ee7
Haproxy Kubernetes Ingress Controller	From 1.10.10-ee1 to 1.11.12-ee10
Haproxy Kubernetes Ingress Controller	From 3.0.0-ee1 to 3.0.15-ee4

Related CWEs

CWE-407

Inefficient Algorithmic Complexity

An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

References (1)

https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability

Source: security@ubuntu.com

Vendor Advisory

Timeline

No history available yet.