CVE-2014-6269: Buffer Overflow
First published: Tue Sep 30 2014(Updated: )
Multiple integer overflows in the http_request_forward_body function in proto_http.c in HAProxy 1.5-dev23 before 1.5.4 allow remote attackers to cause a denial of service (crash) via a large stream of data, which triggers a buffer overflow and an out-of-bounds read.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Aprox Aproxengine | =1.5-dev23 | |
| Aprox Aproxengine | =1.5-dev24 | |
| Aprox Aproxengine | =1.5-dev25 | |
| Aprox Aproxengine | =1.5-dev26 | |
| Aprox Aproxengine | =1.5.0 | |
| Aprox Aproxengine | =1.5.1 | |
| Aprox Aproxengine | =1.5.2 | |
| Aprox Aproxengine | =1.5.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://article.gmane.org/gmane.comp.web.haproxy/17726
- http://article.gmane.org/gmane.comp.web.haproxy/18097
- http://git.haproxy.org/?p=haproxy-1.5.git;a=commitdiff;h=b4d05093bc89f71377230228007e69a1434c1a0c
- http://rhn.redhat.com/errata/RHSA-2014-1292.html
- http://secunia.com/advisories/59936
- http://secunia.com/advisories/61507
- http://www.openwall.com/lists/oss-security/2014/09/09/23
- http://git.haproxy.org/?p=haproxy-1.5.git%3Ba=commitdiff%3Bh=b4d05093bc89f71377230228007e69a1434c1a0c
Frequently Asked Questions
What is the severity of CVE-2014-6269?
CVE-2014-6269 has a severity rating that can lead to denial of service due to integer overflow vulnerabilities.
How do I fix CVE-2014-6269?
To fix CVE-2014-6269, upgrade HAProxy to version 1.5.4 or later.
What systems are affected by CVE-2014-6269?
CVE-2014-6269 affects multiple versions of HAProxy, specifically versions 1.5-dev23 to 1.5.3.
What type of attack does CVE-2014-6269 enable?
CVE-2014-6269 enables remote attackers to cause a crash of the HAProxy service via crafted large data streams.
Is CVE-2014-6269 related to buffer overflow vulnerabilities?
Yes, CVE-2014-6269 is related to integer overflows that can lead to buffer overflow and out-of-bounds read vulnerabilities.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/haproxy
- canonical/aprox aproxengine
- version/aprox aproxengine/1.5-dev23
- version/aprox aproxengine/1.5-dev24
- version/aprox aproxengine/1.5-dev25
- version/aprox aproxengine/1.5-dev26
- version/aprox aproxengine/1.5.0
- version/aprox aproxengine/1.5.1
- version/aprox aproxengine/1.5.2
- version/aprox aproxengine/1.5.3