CVE-2019-14241: HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_m...

Security readout for executives and security teams

CVE-2019-14241 is a HAProxy denial-of-service issue. An attacker may be able to make affected HAProxy versions crash, disrupting applications that depend on it for proxying or load balancing. The provided sources do not indicate data theft, code execution, or confirmed active exploitation. Exposure is most likely where HAProxy through 2.0.2 is reachable by untrusted clients, especially internet-facing reverse proxy or load-balancer deployments. Packaged distro versions require vendor mapping because backports may change version strings. Handle as a normal-to-high availability remediation item for exposed HAProxy infrastructure. It is not supported as an emergency compromise event by the provided sources, but outages at a proxy layer can have broad business impact. Mitigation focus: Inventory HAProxy versions and identify instances through 2.0.2.; Apply HAProxy or distribution security updates from vendor guidance.; Prioritize internet-facing HAProxy services that process untrusted HTTP traffic..

Prepared

Jun 6, 2026, 14:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.