CVE-2026-93564
Red Hat Build of Apache Camel 3.33.3.SP2 · Vulnerability
CVSS 3.1 7.5 HIGHCheck source for fixed versionsKEV status unknown
cve-program · CVE-2026-93564
PublishedA flaw was found in Netty. A reference-count leak in the HAProxy PROXY-v2 message decoder allows a remote, unauthenticated attacker to send specially crafted PROXY-protocol v2 headers. This can lead to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-93564 · CVE overview and exploitation status
cve-program · CVE-2026-93564
- https://access.redhat.com/errata/RHSA-2026:69440
- https://access.redhat.com/errata/RHSA-2026:69470
- https://access.redhat.com/errata/RHSA-2026:70257
- https://access.redhat.com/errata/RHSA-2026:83612
- https://access.redhat.com/errata/RHSA-2026:95759
- https://access.redhat.com/errata/RHSA-2026:95760
- https://access.redhat.com/errata/RHSA-2026:95761
- https://access.redhat.com/errata/RHSA-2026:95762
- https://access.redhat.com/security/cve/CVE-2026-93564
- https://bugzilla.redhat.com/show_bug.cgi?id=2536953
Related changes
Linked by CVE identifier- Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881) · Affected-version evidence changed · 6 Nov 2026
- Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881) · Affected-version evidence changed · 6 Nov 2026