Lucene search
Veracode Vulnerability DatabaseVERACODE:11094HistoryJan 15, 2019 - 8:56 a.m.
Denial Of Service (DoS)
2019-01-1508:56:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.04 Low
EPSS
Percentile
92.1%
HAProxy is vulnerable to denial of service. Requests are not properly handled when the proxy had certain rules in its configuration that uses hdr_ip criterion. A remote attacker is able to crash the application using a malicious HTTP header with a certain value in the MAX_HDR_HISTORY variable.
| CPE | Name | Operator | Version |
|---|---|---|---|
| haproxy | eq | 1.4.22__5.el6op | |
| haproxy | eq | 1.4.22__4.el6op | |
| haproxy | eq | 1.4.22__4.el6_4 | |
| haproxy | eq | 1.4.22__5.el6_4 | |
| haproxy | eq | 1.4.22__3.el6 |
References
marc.info/?l=haproxy&m=137147915029705&w=2
rhn.redhat.com/errata/RHSA-2013-1120.html
rhn.redhat.com/errata/RHSA-2013-1204.html
secunia.com/advisories/54344
www.debian.org/security/2013/dsa-2711
www.ubuntu.com/usn/USN-1889-1
access.redhat.com/security/updates/classification/#moderate
access.redhat.com/support/offerings/techpreview/
bugzilla.redhat.com/show_bug.cgi?id=974259
rhn.redhat.com/errata/RHSA-2013-1120.html
Related
nessus
nessus
Scientific Linux Security Update : haproxy on SL6.x i386/x86_64 (20130730)
2013-07-31 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 : haproxy vulnerability (USN-1889-1)
2013-06-21 00:00:00
HAProxy Multiple Denial of Service Vulnerabilities
2013-07-08 00:00:00
prion
prion
Design/Logic Flaw
2013-08-19 13:07:00
nvd
nvd
CVE-2013-2175
2013-08-19 13:07:58
cve
cve
CVE-2013-2175
2013-08-19 13:07:58
openvas
openvas
Ubuntu Update for haproxy USN-1889-1
2013-06-24 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-215)
2015-09-08 00:00:00
Ubuntu: Security Advisory (USN-1889-1)
2013-06-24 00:00:00
amazon
amazon
Medium: haproxy
2013-08-07 21:21:00
securityvulns
securityvulns
[USN-1889-1] HAProxy vulnerability
2013-07-01 00:00:00
HAProxy security vulnerabilities
2013-07-01 00:00:00
centos
centos
haproxy security update
2013-07-30 18:55:18
ubuntu
ubuntu
HAProxy vulnerability
2013-06-20 00:00:00
cvelist
cvelist
CVE-2013-2175
2013-08-19 00:00:00
redhat
redhat
(RHSA-2013:1204) Moderate: haproxy security update
2013-09-04 00:00:00
(RHSA-2013:1120) Moderate: haproxy security update
2013-07-30 00:00:00
ubuntucve
ubuntucve
CVE-2013-2175
2013-06-19 00:00:00
debiancve
debiancve
CVE-2013-2175
2013-08-19 13:07:58
gentoo
gentoo
HAProxy: Multiple vulnerabilities
2013-07-11 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: haproxy-1.4.24-1.fc19
2013-06-29 18:15:34
[SECURITY] Fedora 18 Update: haproxy-1.4.24-1.fc18
2013-06-28 06:14:36
[SECURITY] Fedora 17 Update: haproxy-1.4.24-1.fc17
2013-06-28 06:16:10
osv
osv
haproxy - several
2013-06-19 00:00:00
debian
debian
[SECURITY] [DSA 2711-1] haproxy security update
2013-06-19 17:11:58