NVD

Id
44630  
Name
CVE-2012-2942  
Description
Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21, when global.tune.bufsize is set to a value greater than the default and header rewriting is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-05-27  
Modified Date
2013-08-21  
Seq
2012-2942  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
224067 44630 CVE-2012-2942 http://haproxy.1wt.eu/#news  View
224068 44630 CVE-2012-2942 http://haproxy.1wt.eu/download/1.4/src/CHANGELOG  View
224069 44630 CVE-2012-2942 http://haproxy.1wt.eu/git?p=haproxy-1.4.git;a=commit;h=30297cb17147a8d339eb160226bcc08c91d9530b  View
224070 44630 CVE-2012-2942 GLSA-201301-02  View
224071 44630 CVE-2012-2942 DSA-2711  View
224072 44630 CVE-2012-2942 [oss-security] 20120523 CVE request: haproxy trash buffer overflow flaw  View
224073 44630 CVE-2012-2942 [oss-security] 20120523 Re: CVE request: haproxy trash buffer overflow flaw  View
224074 44630 CVE-2012-2942 [oss-security] 20120528 Duplicate CVE identifiers (CVE-2012-2391 and CVE-2012-2942) assigned to HAProxy issue  View
224075 44630 CVE-2012-2942 53647  View
224076 44630 CVE-2012-2942 USN-1800-1  View
224077 44630 CVE-2012-2942 haproxy-trash-bo(75777)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26855 JVNDB-2012-002562 HAProxy のヘッダキャプチャ機能のトラッシュバッファにおけるバッファオーバーフローの脆弱性 HAProxy のヘッダキャプチャ機能のトラッシュバッファには、global.tune.bufsize がデフォルトより大きな値に設定され、ヘッダの書き換え機能が有効な場合、バッファオーバーフローの脆弱性が存在します。 CVE-2012-2942 56180 CVE-2012-2942 44630 5.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002562.html 2012-05-27 2013-08-27 View