HAProxy vulnerabilities

2013-04-1500:00:00

ubuntu.com

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.105 Low

EPSS

Percentile

95.0%

JSON

Releases

Ubuntu 12.10
Ubuntu 12.04
Ubuntu 11.10

Packages

haproxy - fast and reliable load balancing reverse proxy

Details

It was discovered that HAProxy incorrectly handled configurations where
global.tune.bufsize was set to a value higher than the default. A remote
attacker could use this issue to cause a denial of service, or possibly
execute arbitrary code. (CVE-2012-2942)

Yves Lafon discovered that HAProxy incorrectly handled HTTP keywords in TCP
inspection rules when HTTP keep-alive is enabled. A remote attacker could
use this issue to cause a denial of service, or possibly execute arbitrary
code. (CVE-2013-1912)

OSVersionArchitecturePackageVersionFilename
Ubuntu12.10noarchhaproxy< 1.4.18-0ubuntu2.1UNKNOWN
Ubuntu12.04noarchhaproxy< 1.4.18-0ubuntu1.1UNKNOWN
Ubuntu11.10noarchhaproxy< 1.4.15-1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.10	noarch	haproxy	< 1.4.18-0ubuntu2.1	UNKNOWN
Ubuntu	12.04	noarch	haproxy	< 1.4.18-0ubuntu1.1	UNKNOWN
Ubuntu	11.10	noarch	haproxy	< 1.4.15-1ubuntu0.1	UNKNOWN