Lucene search

[email protected]NVD:CVE-2013-2175

HistoryAug 19, 2013 - 1:07 p.m.

CVE-2013-2175

2013-08-1913:07:58

CWE-20

CWE-284

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.04

Percentile

92.1%

JSON

HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other “hdr_*” functions with a negative occurrence count, allows remote attackers to cause a denial of service (negative array index usage and crash) via an HTTP header with a certain number of values, related to the MAX_HDR_HISTORY variable.

Affected configurations

Nvd

Node

debiandebian_linuxMatch6.0

Node

canonicalubuntu_linuxMatch12.04-lts

canonicalubuntu_linuxMatch12.10

canonicalubuntu_linuxMatch13.04

Node

redhatenterprise_linux_load_balancerMatch6.0

redhatenterprise_linux_load_balancerMatch6.4

Node

haproxyhaproxyMatch1.4

haproxyhaproxyMatch1.4.0

haproxyhaproxyMatch1.4.1

haproxyhaproxyMatch1.4.2

haproxyhaproxyMatch1.4.3

haproxyhaproxyMatch1.4.4

haproxyhaproxyMatch1.4.5

haproxyhaproxyMatch1.4.6

haproxyhaproxyMatch1.4.7

haproxyhaproxyMatch1.4.8

haproxyhaproxyMatch1.4.9

haproxyhaproxyMatch1.4.10

haproxyhaproxyMatch1.4.11

haproxyhaproxyMatch1.4.12

haproxyhaproxyMatch1.4.13

haproxyhaproxyMatch1.4.14

haproxyhaproxyMatch1.4.15

haproxyhaproxyMatch1.4.16

haproxyhaproxyMatch1.4.17

haproxyhaproxyMatch1.4.18

haproxyhaproxyMatch1.4.19

haproxyhaproxyMatch1.4.20

haproxyhaproxyMatch1.4.21

haproxyhaproxyMatch1.4.22

haproxyhaproxyMatch1.4.23

Node

haproxyhaproxyMatch1.5dev

haproxyhaproxyMatch1.5dev0

haproxyhaproxyMatch1.5dev1

haproxyhaproxyMatch1.5dev10

haproxyhaproxyMatch1.5dev11

haproxyhaproxyMatch1.5dev12

haproxyhaproxyMatch1.5dev13

haproxyhaproxyMatch1.5dev14

haproxyhaproxyMatch1.5dev15

haproxyhaproxyMatch1.5dev16

haproxyhaproxyMatch1.5dev17

haproxyhaproxyMatch1.5dev18

haproxyhaproxyMatch1.5dev2

haproxyhaproxyMatch1.5dev3

haproxyhaproxyMatch1.5dev4

haproxyhaproxyMatch1.5dev5

haproxyhaproxyMatch1.5dev6

haproxyhaproxyMatch1.5dev7

haproxyhaproxyMatch1.5dev8

haproxyhaproxyMatch1.5dev9

VendorProductVersionCPE
debiandebian_linux6.0cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
canonicalubuntu_linux12.04cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
canonicalubuntu_linux12.10cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
canonicalubuntu_linux13.04cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*
redhatenterprise_linux_load_balancer6.0cpe:2.3:a:redhat:enterprise_linux_load_balancer:6.0:*:*:*:*:*:*:*
redhatenterprise_linux_load_balancer6.4cpe:2.3:a:redhat:enterprise_linux_load_balancer:6.4:*:*:*:*:*:*:*
haproxyhaproxy1.4cpe:2.3:a:haproxy:haproxy:1.4:*:*:*:*:*:*:*
haproxyhaproxy1.4.0cpe:2.3:a:haproxy:haproxy:1.4.0:*:*:*:*:*:*:*
haproxyhaproxy1.4.1cpe:2.3:a:haproxy:haproxy:1.4.1:*:*:*:*:*:*:*
haproxyhaproxy1.4.2cpe:2.3:a:haproxy:haproxy:1.4.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
debian	debian_linux	6.0	cpe:2.3:o:debian:debian_linux:6.0:::::::*
canonical	ubuntu_linux	12.04	cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:::::*
canonical	ubuntu_linux	12.10	cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::*
canonical	ubuntu_linux	13.04	cpe:2.3:o:canonical:ubuntu_linux:13.04:::::::*
redhat	enterprise_linux_load_balancer	6.0	cpe:2.3:a:redhat:enterprise_linux_load_balancer:6.0:::::::*
redhat	enterprise_linux_load_balancer	6.4	cpe:2.3:a:redhat:enterprise_linux_load_balancer:6.4:::::::*
haproxy	haproxy	1.4	cpe:2.3:a:haproxy:haproxy:1.4:::::::*
haproxy	haproxy	1.4.0	cpe:2.3:a:haproxy:haproxy:1.4.0:::::::*
haproxy	haproxy	1.4.1	cpe:2.3:a:haproxy:haproxy:1.4.1:::::::*
haproxy	haproxy	1.4.2	cpe:2.3:a:haproxy:haproxy:1.4.2:::::::*