CVE-2015-3281
Fixed in a distro release EPSS 4%
The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.
Products: debian_linux, haproxy, canonical ubuntu_linux, opensuse openstack_cloud, opensuse, suse linux_enterprise_high_availability_extension, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | haproxy | 1.5.14-1 |
| Debian 13 | haproxy | 1.5.14-1 |
| Debian 14 | haproxy | 1.5.14-1 |
| Debian 8 | haproxy | 1.5.8-3+deb8u1 |
| Red Hat Enterprise Linux 6 | haproxy | 0:1.5.4-2.el6_7.1 |
| Red Hat Enterprise Linux 6 | haproxy-debuginfo | 0:1.5.4-2.el6_7.1 |
| Red Hat Enterprise Linux 7 | haproxy | 0:1.5.4-4.el7_1.1 |
| Red Hat Enterprise Linux 7 | haproxy-debuginfo | 0:1.5.4-4.el7_1.1 |
| Red Hat openshift 2.0 | haproxy15side | 0:1.5.4-2.el6op |
| Red Hat openshift 2.0 | haproxy15side-debuginfo | 0:1.5.4-2.el6op |
| Red Hat openshift 2.0 | openshift-enterprise-release | 0:2.2.8-1.el6op |
| Red Hat openshift 2.0 | openshift-enterprise-upgrade | 0:2.2.8-1.el6op |
| Red Hat openshift 2.0 | openshift-enterprise-upgrade-broker | 0:2.2.8-1.el6op |
| Red Hat openshift 2.0 | openshift-enterprise-upgrade-node | 0:2.2.8-1.el6op |
| Red Hat openshift 2.0 | openshift-enterprise-yum-validator | 0:2.2.8-1.el6op |
| Red Hat openshift 2.0 | openshift-origin-broker-util | 0:1.37.4.2-1.el6op |
| Red Hat openshift 2.0 | openshift-origin-cartridge-haproxy | 0:1.31.4.1-1.el6op |
| Red Hat openshift 2.0 | openshift-origin-cartridge-jbosseap | 0:2.27.3.1-1.el6op |
| Red Hat openshift 2.0 | openshift-origin-cartridge-jbossews | 0:1.35.3.2-1.el6op |
| Red Hat openshift 2.0 | openshift-origin-cartridge-python | 0:1.34.1.1-1.el6op |
| Red Hat openshift 2.0 | openshift-origin-node-util | 0:1.38.5.1-1.el6op |
| Red Hat openshift 2.0 | rhc | 0:1.38.4.5-1.el6op |
| Red Hat openshift 2.0 | rubygem-openshift-origin-common | 0:1.29.4.1-1.el6op |
| Red Hat openshift 2.0 | rubygem-openshift-origin-controller | 0:1.38.4.2-1.el6op |
| Red Hat openshift 2.0 | rubygem-openshift-origin-node | 0:1.38.4.1-1.el6op |
| Red Hat openshift 2.0 | rubygem-openshift-origin-routing-daemon | 0:0.26.4.4-1.el6op |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 | haproxy | 1.5.4-2.4.1 |
| SUSE Linux Enterprise High Availability Extension 12 | haproxy | 1.5.4-2.4.1 |
| SUSE OpenStack Cloud 5 | haproxy | 1.5.4-12.1 |
| openSUSE Tumbleweed | haproxy | 1.7.0-1.1 |