CVE-2019-14241: haproxy Loop with Unreachable Exit Condition
Vulnerability summary
CVE-2019-14241 is a high (CVSS 7.5) Loop with Unreachable Exit Condition vulnerability in haproxy. EPSS estimates a 70.24% chance of exploitation in the next 30 days, higher than 99.3% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (GitHub, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 23-07-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
70.24%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
No change 0.00 pp
From 70.24% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundHaproxy
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Opensuse2 products
- haproxy&distro=openSUSE Leap 15.0< 2.0.5+git0.d905f49a-lp150.2.13.1
- haproxy&distro=openSUSE Leap 15.1< 2.0.5+git0.d905f49a-lp151.2.3.1
Suse2 products
- haproxy&distro=SUSE Linux Enterprise High Availability Extension 15< 2.0.5+git0.d905f49a-3.12.6
- haproxy&distro=SUSE Linux Enterprise High Availability Extension 15 SP1< 2.0.5+git0.d905f49a-8.3.5
Haproxy1 product
- haproxy≥ 1.4, ≤ 1.9.8 | ≥ 2.0.0, ≤ 2.0.2
3 vendors · 5 products
References
11 links- lists.opensuse.org/archives/…Advisory
Show all 11 references
- lists.opensuse.org/archives/…Advisory