HAProxy up to and including 2.0.2 allows malicious users to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.
haproxy haproxy