The vulnerability exists due to insufficient validation of user-supplied input when parsing number in mjson. A remote attacker can pass specially crafted input to the server and perform a denial of service (DoS) attack.

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03587-1 advisory.

    - CVE-2025-11230: Fixed issue in the mjson JSON decoder, that could have let to excessive       resource consumption when processing numbers with large exponents (bsc#1250983).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03589-1 advisory.

    - CVE-2025-11230: Fixed issue in the mjson JSON decoder, that could have let to excessive       resource consumption when processing numbers with large exponents (bsc#1250983).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7805-1 advisory.

    Oula Kivalo discovered that HAProxy incorrectly handled parsing certain json numbers. A remote attacker     could possibly use this issue to cause HAProxy to crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6017 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6017-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     October 03, 2025                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : haproxy     CVE ID         : CVE-2025-11230

    Oula Kivalo reported that HAProxy, a fast and reliable load balancing     reverse proxy, is prone to a denial of service vulnerability when     parsing JSON numbers.

    For the oldstable distribution (bookworm), this problem has been fixed     in version 2.6.12-1+deb12u3.

    For the stable distribution (trixie), this problem has been fixed in     version 3.0.11-1+deb13u1.

    We recommend that you upgrade your haproxy packages.

    For the detailed security status of haproxy please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/haproxy

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
270323	SUSE SLES15 / openSUSE 15 Security Update : haproxy (SUSE-SU-2025:03587-1)	Nessus	SuSE Local Security Checks	medium
270301	SUSE SLES15 Security Update : haproxy (SUSE-SU-2025:03589-1)	Nessus	SuSE Local Security Checks	medium
267929	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : HAProxy vulnerability (USN-7805-1)	Nessus	Ubuntu Local Security Checks	high
266463	Debian dsa-6017 : haproxy - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2025-11230

medium

Tenable Plugins

medium

medium

high

high