HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.

vendor_unpatched cve-2025-32464: Unpatched CVEs for Ubuntu Linux (cve-2025-32464)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:1338-1 advisory.

    - CVE-2025-32464: Fixed heap-based buffer overflow in sample_conv_regsub. (bsc#1240971)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the haproxy package has been released.

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1264-1 advisory.

    - CVE-2025-32464: Fixed heap-based buffer overflow in sample_conv_regsub. (bsc#1240971)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7431-1 advisory.

    Aleandro Prudenzano and Edoardo Geraci discovered that HAProxy incorrectly handled certain uncommon     configurations that replace multiple short patterns with a longer one. A remote attacker could use this     issue to cause HAProxy to crash, resulting in a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
234613	SUSE SLES15 Security Update : haproxy (SUSE-SU-2025:1338-1)	Nessus	SuSE Local Security Checks	medium
234494	Photon OS 4.0: Haproxy PHSA-2025-4.0-0781	Nessus	PhotonOS Local Security Checks	medium
234486	SUSE SLES15 / openSUSE 15 Security Update : haproxy (SUSE-SU-2025:1264-1)	Nessus	SuSE Local Security Checks	medium
234135	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : HAProxy vulnerability (USN-7431-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2025-32464

medium

Tenable Plugins

Coming Soon

medium

medium

medium

medium