CVE-2013-2175 HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers to cause a denial of service (neg...
MediumCVSS 5.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers to cause a denial of service (negative array index usage and crash) via an HTTP header with a certain number of values, related to the MAX_HDR_HISTORY variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/haproxy(Debian:12) | < 1.4.24-1 | 1.4.24-1 |
| debian/haproxy(Debian:13) | < 1.4.24-1 | 1.4.24-1 |
| debian/haproxy(Debian:14) | < 1.4.24-1 | 1.4.24-1 |
| debian linux | = 6.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.10 | No fix listed |
| Canonical Ubuntu Linux | = 13.04 | No fix listed |
| redhat enterprise linux load balancer | = 6.0 | No fix listed |
| redhat enterprise linux load balancer | = 6.4 | No fix listed |
| HAProxy | = 1.4 | No fix listed |
| HAProxy | = 1.4.0 | No fix listed |
| HAProxy | = 1.4.1 | No fix listed |
| HAProxy | = 1.4.2 | No fix listed |
| HAProxy | = 1.4.3 | No fix listed |
| HAProxy | = 1.4.4 | No fix listed |
| HAProxy | = 1.4.5 | No fix listed |
| HAProxy | = 1.4.6 | No fix listed |
| HAProxy | = 1.4.7 | No fix listed |
| HAProxy | = 1.4.8 | No fix listed |
| HAProxy | = 1.4.9 | No fix listed |
| HAProxy | = 1.4.10 | No fix listed |
| HAProxy | = 1.4.11 | No fix listed |
| HAProxy | = 1.4.12 | No fix listed |
| HAProxy | = 1.4.13 | No fix listed |
| HAProxy | = 1.4.14 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| HAProxy | = 1.4.15 | No fix listed |
| HAProxy | = 1.4.16 | No fix listed |
| HAProxy | = 1.4.17 | No fix listed |
| HAProxy | = 1.4.18 | No fix listed |
| HAProxy | = 1.4.19 | No fix listed |
| HAProxy | = 1.4.20 | No fix listed |
| HAProxy | = 1.4.21 | No fix listed |
| HAProxy | = 1.4.22 | No fix listed |
| HAProxy | = 1.4.23 | No fix listed |
| HAProxy | = 1.5-dev | No fix listed |
| HAProxy | = 1.5-dev0 | No fix listed |
| HAProxy | = 1.5-dev1 | No fix listed |
| HAProxy | = 1.5-dev10 | No fix listed |
| HAProxy | = 1.5-dev11 | No fix listed |
| HAProxy | = 1.5-dev12 | No fix listed |
| HAProxy | = 1.5-dev13 | No fix listed |
| HAProxy | = 1.5-dev14 | No fix listed |
| HAProxy | = 1.5-dev15 | No fix listed |
| HAProxy | = 1.5-dev16 | No fix listed |
| HAProxy | = 1.5-dev17 | No fix listed |
| HAProxy | = 1.5-dev18 | No fix listed |
| HAProxy | = 1.5-dev2 | No fix listed |
| HAProxy | = 1.5-dev3 | No fix listed |
| HAProxy | = 1.5-dev4 | No fix listed |
| HAProxy | = 1.5-dev5 | No fix listed |
| HAProxy | = 1.5-dev6 | No fix listed |
| HAProxy | = 1.5-dev7 | No fix listed |
| HAProxy | = 1.5-dev8 | No fix listed |
| HAProxy | = 1.5-dev9 | No fix listed |
References
- Debian Security Tracker CVE-2013-2175 vendor-advisory
- [haproxy] 20130617 [ANNOUNCE] haproxy-1.5-dev19 and 1.4.24 (security update) mailing-list patch third-party-advisory
- RHSA-2013:1120 third-party-advisory vendor-advisory
- RHSA-2013:1204 third-party-advisory vendor-advisory
- 54344 third-party-advisory
- DSA-2711 third-party-advisory vendor-advisory
- USN-1889-1 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking