CVE-2019-14243: Haproxy Proxyprotocol

High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.

headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, allows remote attackers to cause a denial of service (webserver panic and daemon crash) via a crafted HAProxy PROXY v2 request with truncated source/destination address data.

Affected products

• Haproxy Proxyprotocol: before 0.0.2 (fixed in 0.0.2)

Published 2019-07-23. Last modified 2026-06-17.