CVE-2013-2175

HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers to cause a denial of service (negative array index usage and crash) via an HTTP header with a certain number of values, related to the MAX_HDR_HISTORY variable.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:redhat:enterprise_linux_load_balancer:6.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:enterprise_linux_load_balancer:6.0:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:haproxy:haproxy:1.4.6:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.8:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.15:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.17:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.22:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.9:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.10:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.11:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.12:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.13:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.18:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.7:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.21:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.19:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.20:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.23:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.16:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.14:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.4.3:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:haproxy:haproxy:1.5:dev12:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev10:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev3:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev1:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev18:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev16:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev15:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev14:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev0:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev17:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev7:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev4:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev6:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev13:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev9:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev2:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev8:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev11:*:*:*:*:*:*
cpe:2.3:a:haproxy:haproxy:1.5:dev5:*:*:*:*:*:*

Information

Published : 2013-08-19 06:07

Updated : 2016-12-07 15:43


NVD link : CVE-2013-2175

Mitre link : CVE-2013-2175


JSON object : View

CWE
CWE-284

Improper Access Control

CWE-20

Improper Input Validation

Advertisement

dedicated server usa

Products Affected

debian

  • debian_linux

canonical

  • ubuntu_linux

redhat

  • enterprise_linux_load_balancer

haproxy

  • haproxy