Lucene search

K
ubuntuUbuntuUSN-1889-1
HistoryJun 20, 2013 - 12:00 a.m.

HAProxy vulnerability

2013-06-2000:00:00
ubuntu.com
27

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.04 Low

EPSS

Percentile

92.0%

Releases

  • Ubuntu 13.04
  • Ubuntu 12.10
  • Ubuntu 12.04

Packages

  • haproxy - fast and reliable load balancing reverse proxy

Details

David Torgerson discovered that HAProxy incorrectly parsed certain HTTP
headers. A remote attacker could use this issue to cause HAProxy to stop
responding, resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchhaproxy< 1.4.18-0ubuntu3.1UNKNOWN
Ubuntu12.10noarchhaproxy< 1.4.18-0ubuntu2.2UNKNOWN
Ubuntu12.04noarchhaproxy< 1.4.18-0ubuntu1.2UNKNOWN

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.04 Low

EPSS

Percentile

92.0%