CVE-2015-3281 The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive...
MediumCVSS 5.0
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/haproxy(Debian:12) | < 1.5.14-1 | 1.5.14-1 |
| debian/haproxy(Debian:13) | < 1.5.14-1 | 1.5.14-1 |
| debian/haproxy(Debian:14) | < 1.5.14-1 | 1.5.14-1 |
| debian linux | = 8.0 | No fix listed |
| HAProxy | = 1.5-dev | No fix listed |
| HAProxy | = 1.5-dev0 | No fix listed |
| HAProxy | = 1.5-dev1 | No fix listed |
| HAProxy | = 1.5-dev10 | No fix listed |
| HAProxy | = 1.5-dev11 | No fix listed |
| HAProxy | = 1.5-dev12 | No fix listed |
| HAProxy | = 1.5-dev13 | No fix listed |
| HAProxy | = 1.5-dev14 | No fix listed |
| HAProxy | = 1.5-dev15 | No fix listed |
| HAProxy | = 1.5-dev16 | No fix listed |
| HAProxy | = 1.5-dev17 | No fix listed |
| HAProxy | = 1.5-dev18 | No fix listed |
| HAProxy | = 1.5-dev19 | No fix listed |
| HAProxy | = 1.5-dev2 | No fix listed |
| HAProxy | = 1.5-dev3 | No fix listed |
| HAProxy | = 1.5-dev4 | No fix listed |
| HAProxy | = 1.5-dev5 | No fix listed |
| HAProxy | = 1.5-dev6 | No fix listed |
| HAProxy | = 1.5-dev7 | No fix listed |
| HAProxy | = 1.5-dev8 | No fix listed |
| HAProxy | = 1.5-dev9 | No fix listed |
Show 34 more
| Product | Affected versions | Fixed in |
|---|---|---|
| HAProxy | = 1.5.0 | No fix listed |
| HAProxy | = 1.5.1 | No fix listed |
| HAProxy | = 1.5.2 | No fix listed |
| HAProxy | = 1.5.3 | No fix listed |
| HAProxy | = 1.5.4 | No fix listed |
| HAProxy | = 1.5.5 | No fix listed |
| HAProxy | = 1.5.6 | No fix listed |
| HAProxy | = 1.5.7 | No fix listed |
| HAProxy | = 1.5.8 | No fix listed |
| HAProxy | = 1.5.9 | No fix listed |
| HAProxy | = 1.5.10 | No fix listed |
| HAProxy | = 1.5.11 | No fix listed |
| HAProxy | = 1.5.12 | No fix listed |
| HAProxy | = 1.5.13 | No fix listed |
| HAProxy | = 1.6-dev0 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| openSUSE openstack cloud | = 5 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| SUSE linux enterprise high availability extension | = 12 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 7.1 | No fix listed |
| redhat enterprise linux server eus | = 7.2 | No fix listed |
| redhat enterprise linux server eus | = 7.3 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.3 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-3281 vendor-advisory
- git.haproxy.org
- SUSE-SU-2015:1663 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:1831 mailing-list third-party-advisory vendor-advisory
- RHSA-2015:1741 third-party-advisory vendor-advisory
- RHSA-2015:2666 third-party-advisory vendor-advisory
- DSA-3301 third-party-advisory vendor-advisory
- www.haproxy.org patch vendor-advisory
- 75554 third-party-advisory vdb-entry
- USN-2668-1 third-party-advisory vendor-advisory