CVE-2015-3281
haproxy: information leak in buffer_slow_realign()
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.
La función buffer_slow_realign en HAProxy 1.5.x anterior a 1.5.14 y 1.6-dev no realinea correctamente un buffer que es utilizado para datos salientes pendientes, lo que permite a atacantes remotos obtener información sensible (contenidos de memoria no inicializada de solicitudes previas) a través de una solicitud manipulada.
An implementation error related to the memory management of request and responses was found within HAProxy's buffer_slow_realign() function. An unauthenticated remote attacker could possibly use this flaw to leak certain memory buffer contents from a past request or session.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-04-10 CVE Reserved
- 2015-07-06 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://git.haproxy.org/?p=haproxy-1.5.git%3Ba=commit%3Bh=7ec765568883b2d4e5a2796adbeb492a22ec9bd4 | X_refsource_confirm | |
| http://www.securityfocus.com/bid/75554 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.haproxy.org/news.html | 2024-05-29 |
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html | 2024-05-29 | |
| http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00023.html | 2024-05-29 | |
| http://rhn.redhat.com/errata/RHSA-2015-1741.html | 2024-05-29 | |
| http://rhn.redhat.com/errata/RHSA-2015-2666.html | 2024-05-29 | |
| http://www.debian.org/security/2015/dsa-3301 | 2024-05-29 | |
| http://www.ubuntu.com/usn/USN-2668-1 | 2024-05-29 | |
| https://access.redhat.com/security/cve/CVE-2015-3281 | 2015-12-17 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1239072 | 2015-12-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev0 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev1 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev10 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev11 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev12 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev13 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev14 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev15 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev16 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev17 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev18 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev19 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev2 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev3 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev4 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev5 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev6 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev7 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev8 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5" | dev9 |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.0 Search vendor "Haproxy" for product "Haproxy" and version "1.5.0" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.1 Search vendor "Haproxy" for product "Haproxy" and version "1.5.1" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.2 Search vendor "Haproxy" for product "Haproxy" and version "1.5.2" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.3 Search vendor "Haproxy" for product "Haproxy" and version "1.5.3" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.4 Search vendor "Haproxy" for product "Haproxy" and version "1.5.4" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.5 Search vendor "Haproxy" for product "Haproxy" and version "1.5.5" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.6 Search vendor "Haproxy" for product "Haproxy" and version "1.5.6" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.7 Search vendor "Haproxy" for product "Haproxy" and version "1.5.7" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.8 Search vendor "Haproxy" for product "Haproxy" and version "1.5.8" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.9 Search vendor "Haproxy" for product "Haproxy" and version "1.5.9" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.10 Search vendor "Haproxy" for product "Haproxy" and version "1.5.10" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.11 Search vendor "Haproxy" for product "Haproxy" and version "1.5.11" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.12 Search vendor "Haproxy" for product "Haproxy" and version "1.5.12" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.5.13 Search vendor "Haproxy" for product "Haproxy" and version "1.5.13" | - |
Affected
| ||||||
| Haproxy Search vendor "Haproxy" | Haproxy Search vendor "Haproxy" for product "Haproxy" | 1.6 Search vendor "Haproxy" for product "Haproxy" and version "1.6" | dev0 |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 14.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "14.10" | - |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 15.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "15.04" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Openstack Cloud Search vendor "Opensuse" for product "Openstack Cloud" | 5 Search vendor "Opensuse" for product "Openstack Cloud" and version "5" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 13.2 Search vendor "Opensuse" for product "Opensuse" and version "13.2" | - |
Affected
| ||||||
| Suse Search vendor "Suse" | Linux Enterprise High Availability Extension Search vendor "Suse" for product "Linux Enterprise High Availability Extension" | 12 Search vendor "Suse" for product "Linux Enterprise High Availability Extension" and version "12" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Desktop Search vendor "Redhat" for product "Enterprise Linux Desktop" | 7.0 Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "7.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Search vendor "Redhat" for product "Enterprise Linux Server" | 7.0 Search vendor "Redhat" for product "Enterprise Linux Server" and version "7.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Aus Search vendor "Redhat" for product "Enterprise Linux Server Aus" | 7.3 Search vendor "Redhat" for product "Enterprise Linux Server Aus" and version "7.3" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Aus Search vendor "Redhat" for product "Enterprise Linux Server Aus" | 7.4 Search vendor "Redhat" for product "Enterprise Linux Server Aus" and version "7.4" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Aus Search vendor "Redhat" for product "Enterprise Linux Server Aus" | 7.6 Search vendor "Redhat" for product "Enterprise Linux Server Aus" and version "7.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Eus Search vendor "Redhat" for product "Enterprise Linux Server Eus" | 7.1 Search vendor "Redhat" for product "Enterprise Linux Server Eus" and version "7.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Eus Search vendor "Redhat" for product "Enterprise Linux Server Eus" | 7.2 Search vendor "Redhat" for product "Enterprise Linux Server Eus" and version "7.2" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Eus Search vendor "Redhat" for product "Enterprise Linux Server Eus" | 7.3 Search vendor "Redhat" for product "Enterprise Linux Server Eus" and version "7.3" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Eus Search vendor "Redhat" for product "Enterprise Linux Server Eus" | 7.4 Search vendor "Redhat" for product "Enterprise Linux Server Eus" and version "7.4" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Eus Search vendor "Redhat" for product "Enterprise Linux Server Eus" | 7.5 Search vendor "Redhat" for product "Enterprise Linux Server Eus" and version "7.5" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Eus Search vendor "Redhat" for product "Enterprise Linux Server Eus" | 7.6 Search vendor "Redhat" for product "Enterprise Linux Server Eus" and version "7.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Tus Search vendor "Redhat" for product "Enterprise Linux Server Tus" | 7.3 Search vendor "Redhat" for product "Enterprise Linux Server Tus" and version "7.3" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Tus Search vendor "Redhat" for product "Enterprise Linux Server Tus" | 7.6 Search vendor "Redhat" for product "Enterprise Linux Server Tus" and version "7.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Workstation Search vendor "Redhat" for product "Enterprise Linux Workstation" | 7.0 Search vendor "Redhat" for product "Enterprise Linux Workstation" and version "7.0" | - |
Affected
| ||||||