PT-2013-1251 · Haproxy+3 · Haproxy+3

Yves Lafon · Published 2013-04-10 · Updated 2024-06-15 · CVE-2013-1912

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HAProxy versions 1.4 through 1.4.22 HAProxy versions 1.5-dev through 1.5-dev17

Description The issue is related to a buffer overflow in HAProxy, which can be exploited when HTTP keep-alive is enabled, and specific conditions are met, such as using HTTP keywords in TCP inspection rules and running with rewrite rules that append to requests. This can allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests. The vulnerability can be exploited remotely and may lead to a disruption of confidentiality, integrity, and availability of protected information.

Recommendations For HAProxy versions 1.4 through 1.4.22, consider disabling HTTP keep-alive and TCP inspection rules using HTTP keywords as a temporary workaround until a patch is available. For HAProxy versions 1.5-dev through 1.5-dev17, restrict the use of rewrite rules that append to requests to minimize the risk of exploitation. As a general mitigation measure, avoid using pipelined HTTP requests until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2015-1710

BDU:2015-09733

CESA-2013_0868

CVE-2013-1912

DSA-2711-1

OPENSUSE-SU-2024:10114-1

RHSA-2013:0729

RHSA-2013:0868

RHSA-2013_0868

Affected Products

Alt Linux

Centos

Haproxy

Red Hat

References · 35

• http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103730.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-1912 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2942 · Security Note
• https://osv.dev/vulnerability/CVE-2013-1912 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1912 · Security Note
• http://secunia.com/advisories/52725 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1912 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-1912 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103770.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2175 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-0729.html · Vendor Advisory
• http://debian.org/security/2013/dsa-2711 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103794.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09733 · Security Note
• http://ubuntu.com/usn/USN-1800-1 · Vendor Advisory