CVE-2012-2942: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21, when global.tune.bufsize is set to a value greater than the default and header rewriting is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via...

PT-2012-4383

Name of the Vulnerable Software and Affected Versions HAProxy versions prior to 1.4.21 Description The issue is related to a buffer overflow in the trash buffer within the header capture functionality. This occurs when the global.tune.bufsize is set to a value greater than the default and header...

haproxy -- buffer overflow

HAProxy reports: A flaw was reported in HAProxy where, due to a boundary error when copying data into the trash buffer, an external attacker could cause a buffer overflow. Exploiting this flaw could lead to the execution of arbitrary code, however it requires non-default settings for the...