CVE-2013-1912

Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and…

published April 10, 2013

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05569 · 92.8th percentile
Published
2013-04-10T15:00Z
EPSS history
Timeline
  • 10 APR 15:00Z
    Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and…
    cvelistv5