PT-2026-50707 · Haproxy · Haproxy

Tristan Madani · Publicado 2026-06-18 · Atualizado 2026-06-18 · CVE-2026-55203

Mitre

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N

HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field wraps to 0, causing incorrect record consumption and allowing malicious FastCGI backends to desynchronize the FCGI framing parser, potentially causing request routing errors, response smuggling, or memory safety issues.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2026-55203

Produtos afetados

Haproxy

Referências · 3

• https://github.com/haproxy/haproxy/commit/5985276735777634d8c85f1d73bb7764aab0d6dd · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-55203 · Nota de Segurança
• https://vulncheck.com/advisories/haproxy-integer-overflow-in-fcgi-demux-record-length-field · Nota