CVE-2025-32464

MEDIUM EPSS 48.0%

Published Apr 9, 20251y ago · Modified Jun 17, 20262w ago

6.8 CVSS 3.1

Medium

Published Apr 9, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.

CVSS Details

Base Score

6.8

Exploitability

2.2

Impact

4.0

Vector string

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Attack Vector Network

Attack Complexity High

Privileges Required None

User Interaction None

Scope Changed

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

48.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-1025

References 2

github.com https://github.com/haproxy/haproxy/commit/3e3b9eebf871510aee36c3a3336faac2f38c9559
lists.debian.org https://lists.debian.org/debian-lts-announce/2025/04/msg00031.html

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.