Skip to main content
VulnerabilityPublished Updated

Haproxy: Memcpy-param-overlap

Affects haproxySource GCVE Database

0
Severity
Medium

Rated Medium by Threat Radar's AI analysis

Patch
Available – fixed in 76d894956f7c83bd503afc65a8c8240a6c527f40

Data as of 27 Oct 2026, 00:40 UTC

What to do

Upgrade haproxy to 76d894956f7c83bd503afc65a8c8240a6c527f40.

Affected software

ProductAffectedFixed in
OSS-Fuzzhaproxypkg:generic/haproxyOther threatsAffected
  • >=41bded895292573a8fbe9817499c5e996fb5e4ea <76d894956f7c83bd503afc65a8c8240a6c527f40
  • =v3.4-dev10
  • =v3.4-dev9
Fixed in
  • 76d894956f7c83bd503afc65a8c8240a6c527f40

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch is available and has been committed to the HAProxy codebase. Users should update to the fixed version corresponding to commit 76d894956f7c83bd503afc65a8c8240a6c527f40 or later to remediate this issue.

Description

A memory copy parameter overlap vulnerability was identified in HAProxy's htx_replace_blk_value function, reported by OSS-Fuzz. This flaw involves overlapping parameters in a memcpy operation, which can lead to a crash. The issue affects development versions 3.4-dev9 and 3.4-dev10 of HAProxy. A fix has been committed to the codebase.

References

Community reviews

Loading reviews…