Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2015-3281 — MEDIUM severity vulnerability | Release Alert

CVE-2015-3281

MEDIUMCVSS v2

Published

July 6, 2015

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.

haproxy/haproxy

GitHubHAProxy Load Balancer's development branch (mirror of git.haproxy.org)

= 1.5.0, = 1.5.10, = 1.5.12, = 1.5, = 1.5.7, = 1.5.5, = 1.5.1, = 1.5.4, = 1.5.2, = 1.5.6, = 1.5.13, = 1.5.11, = 1.5.3, = 1.5.8, = 1.5.9, = 1.6NVD

haproxy

NPMHAProxy management and orchestration module

= 1.5.0, = 1.5.10, = 1.5.12, = 1.5, = 1.5.7, = 1.5.5, = 1.5.1, = 1.5.4, = 1.5.2, = 1.5.6, = 1.5.13, = 1.5.11, = 1.5.3, = 1.5.8, = 1.5.9, = 1.6NVD

haproxy

More on this CVE

NVD↗GitHub Advisory↗

RubyGemsThis gem is intended for use as a HAProxy interface when you need to read statistics or if you like to manage proxies thru Ruby

= 1.5.0, = 1.5.10, = 1.5.12, = 1.5, = 1.5.7, = 1.5.5, = 1.5.1, = 1.5.4, = 1.5.2, = 1.5.6, = 1.5.13, = 1.5.11, = 1.5.3, = 1.5.8, = 1.5.9, = 1.6NVD

observing/haproxy

GitHubHAProxy management and orchestration

= 1.5.0, = 1.5.10, = 1.5.12, = 1.5, = 1.5.7, = 1.5.5, = 1.5.1, = 1.5.4, = 1.5.2, = 1.5.6, = 1.5.13, = 1.5.11, = 1.5.3, = 1.5.8, = 1.5.9, = 1.6NVD