CVE-2015-3281: Buffer Overflow

Published Jul 6, 2015

Updated

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.

Affected Software

57 affected components

Debian Debian Linux=8.0

HAProxy HAProxy=1.5-dev

HAProxy HAProxy=1.5-dev0

HAProxy HAProxy=1.5-dev1

HAProxy HAProxy=1.5-dev10

HAProxy HAProxy=1.5-dev11

HAProxy HAProxy=1.5-dev12

HAProxy HAProxy=1.5-dev13

HAProxy HAProxy=1.5-dev14

HAProxy HAProxy=1.5-dev15

HAProxy HAProxy=1.5-dev16

HAProxy HAProxy=1.5-dev17

HAProxy HAProxy=1.5-dev18

HAProxy HAProxy=1.5-dev19

HAProxy HAProxy=1.5-dev2

HAProxy HAProxy=1.5-dev3

HAProxy HAProxy=1.5-dev4

HAProxy HAProxy=1.5-dev5

HAProxy HAProxy=1.5-dev6

HAProxy HAProxy=1.5-dev7

HAProxy HAProxy=1.5-dev8

HAProxy HAProxy=1.5-dev9

HAProxy HAProxy=1.5.0

HAProxy HAProxy=1.5.1

HAProxy HAProxy=1.5.2

HAProxy HAProxy=1.5.3

HAProxy HAProxy=1.5.4

HAProxy HAProxy=1.5.5

HAProxy HAProxy=1.5.6

HAProxy HAProxy=1.5.7

HAProxy HAProxy=1.5.8

HAProxy HAProxy=1.5.9

HAProxy HAProxy=1.5.10

HAProxy HAProxy=1.5.11

HAProxy HAProxy=1.5.12

HAProxy HAProxy=1.5.13

HAProxy HAProxy=1.6-dev0

Canonical Ubuntu Linux=14.10

Canonical Ubuntu Linux=15.04

openSUSE Openstack Cloud=5

openSUSE openSUSE=13.2

SUSE Linux Enterprise High Availability Extension=12

redhat Enterprise Linux Desktop=7.0

redhat Enterprise Linux Server=7.0

redhat Enterprise Linux Server Aus=7.3

redhat Enterprise Linux Server Aus=7.4

redhat Enterprise Linux Server Aus=7.6

redhat Enterprise Linux Server Eus=7.1

redhat Enterprise Linux Server Eus=7.2

redhat Enterprise Linux Server Eus=7.3

redhat Enterprise Linux Server Eus=7.4

redhat Enterprise Linux Server Eus=7.5

redhat Enterprise Linux Server Eus=7.6

redhat Enterprise Linux Server Tus=7.3

redhat Enterprise Linux Server Tus=7.6

redhat Enterprise Linux Workstation=7.0

openSUSE Linux Enterprise High Availability Extension=12

Remediation

Patch Available

http://www.haproxy.org/news.html

Event History

Jul 6, 2015

CVE Published

via MITRE·02:55 PM

Data Sourced

via MITRE·02:55 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-3281?

CVE-2015-3281 has been classified as having a medium severity due to potential unauthorized access to sensitive information.

How do I fix CVE-2015-3281?

To fix CVE-2015-3281, upgrade HAProxy to version 1.5.14 or later.

What types of attacks can exploit CVE-2015-3281?

CVE-2015-3281 can be exploited by remote attackers sending crafted requests that leverage uninitialized memory access.

Which versions of HAProxy are affected by CVE-2015-3281?

HAProxy versions 1.5.x before 1.5.14 and 1.6-dev prior to the patch are affected by CVE-2015-3281.

What kind of data is at risk due to CVE-2015-3281?

CVE-2015-3281 can expose uninitialized memory contents from previous requests, posing a risk of sensitive information disclosure.