CVE-2025-11230 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-11230 Interim 1 4 2026-03-05T01:26:50Z current 2025-10-04T23:35:22Z 2026-03-05T01:26:50Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-11230 Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-November/002263.html E-Mail link for RHSA-2025:21694 https://lists.suse.com/pipermail/sle-updates/2025-October/042082.html E-Mail link for SUSE-SU-2025:03587-1 https://lists.suse.com/pipermail/sle-updates/2025-October/042081.html E-Mail link for SUSE-SU-2025:03589-1 https://lists.suse.com/pipermail/sle-security-updates/2025-October/023058.html E-Mail link for SUSE-SU-2025:20872-1 https://lists.suse.com/pipermail/sle-security-updates/2025-October/023114.html E-Mail link for SUSE-SU-2025:20900-1 https://lists.suse.com/pipermail/sle-security-updates/2026-January/023808.html E-Mail link for SUSE-SU-2026:20092-1 https://lists.suse.com/pipermail/sle-security-updates/2026-January/023806.html E-Mail link for SUSE-SU-2026:20094-1 https://lists.suse.com/pipermail/sle-security-updates/2026-January/023879.html E-Mail link for SUSE-SU-2026:20109-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sl-micro/6.0/baremetal-os-container:latest Container suse/sl-micro/6.0/base-os-container:latest Container suse/sl-micro/6.0/kvm-os-container:latest Container suse/sl-micro/6.0/rt-os-container:latest Container suse/sl-micro/6.0/toolbox:latest Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.2 Container suse/sl-micro/6.1/base-os-container:2.2.0-4.47 Container suse/sl-micro/6.1/kvm-os-container:2.2.0-4.46 Container suse/sl-micro/6.1/rt-os-container:2.2.0-4.52 Image SL-Micro Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-BYOS-GCE Image SL-Micro-EC2 Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd SUSE Liberty Linux 9 SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise High Availability Extension 15 SP3 SUSE Linux Enterprise High Availability Extension 15 SP4 SUSE Linux Enterprise High Availability Extension 15 SP5 SUSE Linux Enterprise High Availability Extension 15 SP6 SUSE Linux Enterprise High Availability Extension 15 SP7 SUSE Linux Enterprise High Availability Extension 16.0 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Micro 6.2 openSUSE Leap 15.6 openSUSE Leap 16.0 openSUSE Tumbleweed haproxy haproxy-2.4.22+git0.f8e3218e2-150400.3.25.1 haproxy-2.4.22-4.el9_6.1 haproxy-2.8.11+git0.01c1056a4-150600.3.9.1 haproxy-2.8.11+git0.01c1056a4-2.1 haproxy-2.8.11+git0.01c1056a4-slfo.1.1_2.1 haproxy-3.2.0+git0.e134140d2-160000.3.1 haproxy-3.2.6+git0.81568b2d1-1.1 libsqlite3-0-3.49.1-slfo.1.1_1.1 libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Container suse/sl-micro/6.0/kvm-os-container:latest libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Container suse/sl-micro/6.0/rt-os-container:latest libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Container suse/sl-micro/6.0/toolbox:latest libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.2 libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Container suse/sl-micro/6.1/base-os-container:2.2.0-4.47 libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Container suse/sl-micro/6.1/kvm-os-container:2.2.0-4.46 libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Container suse/sl-micro/6.1/rt-os-container:2.2.0-4.52 libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SL-Micro libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SL-Micro-Azure libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SL-Micro-BYOS-Azure libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SL-Micro-BYOS-EC2 libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SL-Micro-BYOS-GCE libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SL-Micro-EC2 libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SLE-Micro libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SLE-Micro-Azure libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS-Azure libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS-EC2 libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS-GCE libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SLE-Micro-EC2 libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SLE-Micro-GCE libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-llc libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-ltd libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-llc libsqlite3-0-3.49.1-slfo.1.1_1.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-ltd haproxy-2.4.22-4.el9_6.1 as a component of SUSE Liberty Linux 9 haproxy-2.4.22+git0.f8e3218e2-150400.3.25.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 haproxy-2.4.22+git0.f8e3218e2-150400.3.25.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 haproxy-2.8.11+git0.01c1056a4-150600.3.9.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP6 haproxy-2.8.11+git0.01c1056a4-150600.3.9.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 haproxy-3.2.0+git0.e134140d2-160000.3.1 as a component of SUSE Linux Enterprise High Availability Extension 16.0 haproxy-2.4.22+git0.f8e3218e2-150400.3.25.1 as a component of SUSE Linux Enterprise Micro 5.3 haproxy-2.4.22+git0.f8e3218e2-150400.3.25.1 as a component of SUSE Linux Enterprise Micro 5.4 haproxy-2.4.22+git0.f8e3218e2-150400.3.25.1 as a component of SUSE Linux Enterprise Micro 5.5 haproxy-3.2.0+git0.e134140d2-160000.3.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 haproxy-2.8.11+git0.01c1056a4-2.1 as a component of SUSE Linux Micro 6.0 haproxy-2.8.11+git0.01c1056a4-slfo.1.1_2.1 as a component of SUSE Linux Micro 6.1 haproxy-3.2.0+git0.e134140d2-160000.3.1 as a component of SUSE Linux Micro 6.2 haproxy-2.8.11+git0.01c1056a4-150600.3.9.1 as a component of openSUSE Leap 15.6 haproxy-3.2.0+git0.e134140d2-160000.3.1 as a component of openSUSE Leap 16.0 haproxy-3.2.6+git0.81568b2d1-1.1 as a component of openSUSE Tumbleweed haproxy as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 haproxy as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 haproxy as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests. CVE-2025-11230 Container suse/sl-micro/6.0/baremetal-os-container:latest:libsqlite3-0-3.49.1-slfo.1.1_1.1 Container suse/sl-micro/6.0/base-os-container:latest:libsqlite3-0-3.49.1-slfo.1.1_1.1 Container suse/sl-micro/6.0/kvm-os-container:latest:libsqlite3-0-3.49.1-slfo.1.1_1.1 Container suse/sl-micro/6.0/rt-os-container:latest:libsqlite3-0-3.49.1-slfo.1.1_1.1 Container suse/sl-micro/6.0/toolbox:latest:libsqlite3-0-3.49.1-slfo.1.1_1.1 Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.2:libsqlite3-0-3.49.1-slfo.1.1_1.1 Container suse/sl-micro/6.1/base-os-container:2.2.0-4.47:libsqlite3-0-3.49.1-slfo.1.1_1.1 Container suse/sl-micro/6.1/kvm-os-container:2.2.0-4.46:libsqlite3-0-3.49.1-slfo.1.1_1.1 Container suse/sl-micro/6.1/rt-os-container:2.2.0-4.52:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SL-Micro:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SL-Micro-Azure:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SL-Micro-BYOS-Azure:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SL-Micro-BYOS-EC2:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SL-Micro-BYOS-GCE:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SL-Micro-EC2:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SLE-Micro:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SLE-Micro-Azure:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SLE-Micro-BYOS:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SLE-Micro-BYOS-Azure:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SLE-Micro-BYOS-EC2:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SLE-Micro-BYOS-GCE:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SLE-Micro-EC2:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SLE-Micro-GCE:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-Azure-llc:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-Azure-ltd:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-EC2-llc:libsqlite3-0-3.49.1-slfo.1.1_1.1 Image SUSE-Multi-Linux-Manager-Server-EC2-ltd:libsqlite3-0-3.49.1-slfo.1.1_1.1 SUSE Liberty Linux 9:haproxy-2.4.22-4.el9_6.1 SUSE Linux Enterprise High Availability Extension 15 SP4:haproxy-2.4.22+git0.f8e3218e2-150400.3.25.1 SUSE Linux Enterprise High Availability Extension 15 SP5:haproxy-2.4.22+git0.f8e3218e2-150400.3.25.1 SUSE Linux Enterprise High Availability Extension 15 SP6:haproxy-2.8.11+git0.01c1056a4-150600.3.9.1 SUSE Linux Enterprise High Availability Extension 15 SP7:haproxy-2.8.11+git0.01c1056a4-150600.3.9.1 SUSE Linux Enterprise High Availability Extension 16.0:haproxy-3.2.0+git0.e134140d2-160000.3.1 SUSE Linux Enterprise Micro 5.3:haproxy-2.4.22+git0.f8e3218e2-150400.3.25.1 SUSE Linux Enterprise Micro 5.4:haproxy-2.4.22+git0.f8e3218e2-150400.3.25.1 SUSE Linux Enterprise Micro 5.5:haproxy-2.4.22+git0.f8e3218e2-150400.3.25.1 SUSE Linux Enterprise Server for SAP applications 16.0:haproxy-3.2.0+git0.e134140d2-160000.3.1 SUSE Linux Micro 6.0:haproxy-2.8.11+git0.01c1056a4-2.1 SUSE Linux Micro 6.1:haproxy-2.8.11+git0.01c1056a4-slfo.1.1_2.1 SUSE Linux Micro 6.2:haproxy-3.2.0+git0.e134140d2-160000.3.1 openSUSE Leap 15.6:haproxy-2.8.11+git0.01c1056a4-150600.3.9.1 openSUSE Leap 16.0:haproxy-3.2.0+git0.e134140d2-160000.3.1 openSUSE Tumbleweed:haproxy-3.2.6+git0.81568b2d1-1.1 SUSE Linux Enterprise High Availability Extension 12 SP5:haproxy SUSE Linux Enterprise High Availability Extension 15 SP3:haproxy SUSE Linux Enterprise Server for SAP Applications 12 SP5:haproxy moderate 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L