NVD

Id
38047  
Name
CVE-2013-1912  
Description
Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-04-10  
Modified Date
2013-11-30  
Seq
2013-1912  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194386 38047 CVE-2013-1912 FEDORA-2013-4807  View
194387 38047 CVE-2013-1912 FEDORA-2013-4827  View
194388 38047 CVE-2013-1912 FEDORA-2013-6253  View
194389 38047 CVE-2013-1912 RHSA-2013:0729  View
194390 38047 CVE-2013-1912 RHSA-2013:0868  View
194391 38047 CVE-2013-1912 DSA-2711  View
194392 38047 CVE-2013-1912 [oss-security] 20130403 CVE-2013-1912 : haproxy may crash on TCP content inspection rules  View
194393 38047 CVE-2013-1912 58820  View
194394 38047 CVE-2013-1912 USN-1800-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20637 JVNDB-2013-002212 HAProxy におけるバッファオーバーフローの脆弱性 HAProxy は、HTTP キープアライブが有効になっている場合、TCP 検査ルールの HTTP キーワードが使用され、リクエストに付与された書き換えルールが実行されるため、バッファオーバーフローの脆弱性が存在します。 CVE-2013-1912 61854 CVE-2013-1912 38047 5.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002212.html 2013-04-03 2013-12-04 View