HAProxy allows denial of service via HTTP/2 PING frames (CVE-2026-110353)
Original title: USN-8972-1: HAProxy vulnerabilities
Remote attackers can trigger CPU exhaustion and denial of service in HAProxy servers through malformed HTTP/2 PING frames.
Ubuntu Security Notices detail two HAProxy vulnerabilities. The first involves incorrectly handled truncated HTTP/2 PING frames. This enables a remote attacker to cause excessive CPU consumption and denial of service. The second flaw affects certain HTTP/1.1 chunked requests with the same effect. No versions, patches, or exploitation details were stated.
- Truncated HTTP/2 PING frames lead to excessive CPU usage.
- Certain HTTP/1.1 chunked requests trigger similar issues.
- Denial of service is possible for affected servers.
- No specific versions or fixed releases mentioned.
- No public exploits or in-the-wild attacks reported.
Impact: denial of service by consuming excessive CPU resources
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-110353+1 related CVE | Unauthenticated DoS in HAProxy via truncated HTTP/2 PING | 7.5 | — |
From the original article
It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service. (CVE-2026-110353) It was discovered that HAProxy incorrectly handled certain HTTP/1.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.