NVD

Id
25156  
Name
CVE-2015-3281  
Description
The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-07-06  
Modified Date
2016-12-27  
Seq
2015-3281  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133051 25156 CVE-2015-3281 http://git.haproxy.org/?p=haproxy-1.5.git;a=commit;h=7ec765568883b2d4e5a2796adbeb492a22ec9bd4  View
133052 25156 CVE-2015-3281 SUSE-SU-2015:1663  View
133053 25156 CVE-2015-3281 openSUSE-SU-2015:1831  View
133054 25156 CVE-2015-3281 RHSA-2015:1741  View
133055 25156 CVE-2015-3281 RHSA-2015:2666  View
133056 25156 CVE-2015-3281 DSA-3301  View
133057 25156 CVE-2015-3281 http://www.haproxy.org/news.html  View
133058 25156 CVE-2015-3281 75554  View
133059 25156 CVE-2015-3281 USN-2668-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8153 JVNDB-2015-003473 HAProxy の buffer_slow_realign 関数における重要な情報を取得される脆弱性 HAProxy の buffer_slow_realign 関数は、保留している発信データに使用されるバッファを適切に再編成しないため、重要な情報 (前のリクエストの初期化されていないメモリコンテンツ) を取得される脆弱性が存在します。 CVE-2015-3281 80506 CVE-2015-3281 25156 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003473.html 2015-07-02 2015-07-10 View