← Back

CVE-2015-3281

nvd nist
Published: Jul 6, 2015Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.

Affected (56)

Show all products
Debian: Debian Linux · Haproxy: Haproxy · Canonical: Ubuntu Linux · Opensuse: Openstack Cloud, Opensuse · Suse: Linux Enterprise High Availability Extension · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation
Debian
1 product
Debian Linux
Haproxy
1 product
Haproxy
Canonical
1 product
Ubuntu Linux
Opensuse
2 products
Openstack Cloud
Opensuse
Suse
1 product
Linux Enterprise High Availability Extension
Redhat
6 products
Enterprise Linux Desktop
Enterprise Linux Server
Enterprise Linux Server Aus
Enterprise Linux Server Eus
Enterprise Linux Server Tus
Enterprise Linux Workstation
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 8.0
Configuration B
36 vulnerable
Vulnerable SoftwareAffected Versions
Haproxy
Haproxy
Version 1.5.0
Haproxy
Version 1.5.10
Haproxy
Version 1.5.11
Haproxy
Version 1.5.12
Haproxy
Version 1.5.13
Haproxy
Version 1.5.1
Haproxy
Version 1.5.2
Haproxy
Version 1.5.3
Haproxy
Version 1.5.4
Haproxy
Version 1.5.5
Haproxy
Version 1.5.6
Haproxy
Version 1.5.7
Haproxy
Version 1.5.8
Haproxy
Version 1.5.9
Haproxy
Version 1.5 dev0
Haproxy
Version 1.5 dev10
Haproxy
Version 1.5 dev11
Haproxy
Version 1.5 dev12
Haproxy
Version 1.5 dev13
Haproxy
Version 1.5 dev14
Haproxy
Version 1.5 dev15
Haproxy
Version 1.5 dev16
Haproxy
Version 1.5 dev17
Haproxy
Version 1.5 dev18
Haproxy
Version 1.5 dev19
Haproxy
Version 1.5 dev1
Haproxy
Version 1.5 dev2
Haproxy
Version 1.5 dev3
Haproxy
Version 1.5 dev4
Haproxy
Version 1.5 dev5
Haproxy
Version 1.5 dev6
Haproxy
Version 1.5 dev7
Haproxy
Version 1.5 dev8
Haproxy
Version 1.5 dev9
Haproxy
Version 1.5 dev
Haproxy
Version 1.6 dev0
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.10
Ubuntu Linux
Version 15.04
Configuration D
3 vulnerable
Vulnerable SoftwareAffected Versions
Openstack Cloud
Version 5
Opensuse
Version 13.2
Linux Enterprise High Availability Extension
Version 12
Configuration E
14 vulnerable
Vulnerable SoftwareAffected Versions
Enterprise Linux Desktop
Version 7.0
Enterprise Linux Server
Version 7.0
Redhat
Enterprise Linux Server Aus
Version 7.3
Enterprise Linux Server Aus
Version 7.4
Enterprise Linux Server Aus
Version 7.6
Redhat
Enterprise Linux Server Eus
Version 7.1
Enterprise Linux Server Eus
Version 7.2
Enterprise Linux Server Eus
Version 7.3
Enterprise Linux Server Eus
Version 7.4
Enterprise Linux Server Eus
Version 7.5
Enterprise Linux Server Eus
Version 7.6
Redhat
Enterprise Linux Server Tus
Version 7.3
Enterprise Linux Server Tus
Version 7.6
Enterprise Linux Workstation
Version 7.0

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (18)

Source: secalert@redhat.com
Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
Third Party AdvisoryVDB Entry
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.