Buffer overflow in HAProxy - CVE-2013-1912
Published: April 10, 2013 / Updated: July 28, 2020
Vulnerability identifier: #VU32666
CSH Severity: Medium
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2013-1912
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring.
Affected software
HAProxy
Gentoo Linux
haproxy (Alpine package)
Gentoo Linux
haproxy (Alpine package)
How to mitigate CVE-2013-1912
Install update from vendor's website.
HAProxy - update to 1.4.23
haproxy (Alpine package) - update to 1.4.23-r0
haproxy (Alpine package) - update to 1.4.23-r0
External References
- http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103730.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103770.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103794.html
- http://rhn.redhat.com/errata/RHSA-2013-0729.html
- http://rhn.redhat.com/errata/RHSA-2013-0868.html
- http://secunia.com/advisories/52725
- http://www.debian.org/security/2013/dsa-2711
- http://www.openwall.com/lists/oss-security/2013/04/03/1
- http://www.securityfocus.com/bid/58820
- http://www.ubuntu.com/usn/USN-1800-1