AZL-50333
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-50333.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-50333
- Upstream
- Published
- 2024-10-14T04:15:05Z
- Modified
- 2026-04-01T05:17:30.647243Z
- Summary
- CVE-2024-49214 affecting package haproxy for versions less than 2.4.24-1
- Details
-
QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a spoofed IP address. This can bypass the IP allow/block list functionality.
- References