CVE-2014-6269: Buffer Overflow

Published Sep 30, 2014

Updated

Multiple integer overflows in the httprequestforwardbody function in protohttp.c in HAProxy 1.5-dev23 before 1.5.4 allow remote attackers to cause a denial of service (crash) via a large stream of data, which triggers a buffer overflow and an out-of-bounds read.

Affected Software

8 affected components

HAProxy HAProxy=1.5-dev23

HAProxy HAProxy=1.5-dev24

HAProxy HAProxy=1.5-dev25

HAProxy HAProxy=1.5-dev26

HAProxy HAProxy=1.5.0

HAProxy HAProxy=1.5.1

HAProxy HAProxy=1.5.2

HAProxy HAProxy=1.5.3

Event History

Sep 30, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6269?

CVE-2014-6269 has a severity rating that can lead to denial of service due to integer overflow vulnerabilities.

How do I fix CVE-2014-6269?

To fix CVE-2014-6269, upgrade HAProxy to version 1.5.4 or later.

What systems are affected by CVE-2014-6269?

CVE-2014-6269 affects multiple versions of HAProxy, specifically versions 1.5-dev23 to 1.5.3.

What type of attack does CVE-2014-6269 enable?

CVE-2014-6269 enables remote attackers to cause a crash of the HAProxy service via crafted large data streams.

Is CVE-2014-6269 related to buffer overflow vulnerabilities?

Yes, CVE-2014-6269 is related to integer overflows that can lead to buffer overflow and out-of-bounds read vulnerabilities.