Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-1912
HistoryApr 10, 2013 - 3:55 p.m.

CVE-2013-1912

2013-04-1015:55:00
Debian Security Bug Tracker
security-tracker.debian.org
11

0.086 Low

EPSS

Percentile

94.5%

Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring.