CVE-2012-2942: Buffer Overflow
Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21, when global.tune.bufsize is set to a value greater than the default and header rewriting is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2942?
CVE-2012-2942 is classified as a High severity vulnerability due to its potential for remote code execution and denial of service.
How do I fix CVE-2012-2942?
To fix CVE-2012-2942, upgrade HAProxy to version 1.4.21 or later, ensuring you have the latest security patches applied.
What does CVE-2012-2942 affect?
CVE-2012-2942 affects HAProxy versions before 1.4.21 when the global.tune.bufsize is set to a value greater than the default.
What are the potential consequences of CVE-2012-2942?
The potential consequences of CVE-2012-2942 include service disruption due to denial of service and the ability for attackers to execute arbitrary code.
Is CVE-2012-2942 an exploitable vulnerability?
Yes, CVE-2012-2942 is considered exploitable as it allows remote attackers to manipulate the buffer overflow condition.