Servers and applications
CVE-2019-11323
HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/ssl_sock.h error.
- Severity
- Medium 5.9
- Published
- 9 May 2019
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 1.9.7
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
HAProxyServers and applications · cpe:a:haproxy:haproxy |
|