HAProxy Resilience & CVE Suite

Suite Overview

HAProxy is widely deployed for ultra-low-latency load balancing and TLS termination. This suite verifies memory buffer pool reclamation, multiplexer deallocation, and parser crash safety.

HAProxy H2-H1 Multiplexing Leak (CVE-2024-45506)

cve_2024_45506 — Tests HAProxy HTTP/2 connection multiplexer buffer reclamation during rapid stream aborts.

HAProxy HTTP/2 Trailer Frame Loop (CVE-2024-45507)

cve_2024_45507 — Evaluates HAProxy ring buffer management under fragmented HTTP payload and trailer frame streaming.

HAProxy mjson Query Complexity DoS (CVE-2025-11230)

cve_2025_11230 — Sends deeply nested or oversized numeric JSON query payloads to test HAProxy mjson parser resilience.

HAProxy QUIC Packet Underflow Loop (CVE-2026-26080)

cve_2026_26080 — Sends truncated QUIC packet headers to test HAProxy QUIC packet parsing loop bounds and underflow defense.

Safe Execution

All simulations are run with real-time latency sampling and automatic abort triggers.

Related simulations