REDHAT-BUG-2490518: Null Pointer Dereference
Published Jun 18, 2026
·Updated
HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert() within src/hpack-tbl.c that fails to validate the return value of hpackdhtdefrag() when the memory pool is exhausted. An attacker can trigger HPACK dynamic table insertions under memory pressure to dereference a NULL pointer and crash HAProxy worker processes, causing denial of service.
Affected Software
1 affected component
HAProxy HAProxy<=3.4.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
haproxyto a version that resolves this vulnerability.Fixed in 3.4.0Patch 9a6d1fe - Upgrade
Upgrade
haproxyto a version that resolves this vulnerability.Patch 9a6d1fe
Event History
Jun 18, 2026
Data Sourced
via Red Hat·05:02 PM
DescriptionSeverityAffected Software