CVE-2013-1912

Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:haproxy:haproxy:1.4:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.20:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.22:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev17:*:*:*:*:*:*

History

No history.

Information

Published : 2013-04-10 15:55

Updated : 2024-02-04 18:16


NVD link : CVE-2013-1912

Mitre link : CVE-2013-1912

CVE.ORG link : CVE-2013-1912


JSON object : View

Products Affected

haproxy

  • haproxy
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer