The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2015-07-06T14:55:00
Updated: 2024-08-06T05:39:32.116Z
Reserved: 2015-04-10T00:00:00
Link: CVE-2015-3281
Vulnrichment
No data.
NVD
Status : Modified
Published: 2015-07-06T15:59:06.167
Modified: 2024-11-21T02:29:04.040
Link: CVE-2015-3281
Redhat