CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3281

The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 27.1%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2015-3281

Haproxy » Haproxy » Version: 1.5

cpe:2.3:a:haproxy:haproxy:1.5
Haproxy » Haproxy » Version: 1.5.0

cpe:2.3:a:haproxy:haproxy:1.5.0
Haproxy » Haproxy » Version: 1.5.1

cpe:2.3:a:haproxy:haproxy:1.5.1
Haproxy » Haproxy » Version: 1.5.10

cpe:2.3:a:haproxy:haproxy:1.5.10
Haproxy » Haproxy » Version: 1.5.11

cpe:2.3:a:haproxy:haproxy:1.5.11
Haproxy » Haproxy » Version: 1.5.12

cpe:2.3:a:haproxy:haproxy:1.5.12
Haproxy » Haproxy » Version: 1.5.13

cpe:2.3:a:haproxy:haproxy:1.5.13
Haproxy » Haproxy » Version: 1.5.2

cpe:2.3:a:haproxy:haproxy:1.5.2
Haproxy » Haproxy » Version: 1.5.3

cpe:2.3:a:haproxy:haproxy:1.5.3
Haproxy » Haproxy » Version: 1.5.4

cpe:2.3:a:haproxy:haproxy:1.5.4
Haproxy » Haproxy » Version: 1.5.5

cpe:2.3:a:haproxy:haproxy:1.5.5
Haproxy » Haproxy » Version: 1.5.6

cpe:2.3:a:haproxy:haproxy:1.5.6
Haproxy » Haproxy » Version: 1.5.7

cpe:2.3:a:haproxy:haproxy:1.5.7
Haproxy » Haproxy » Version: 1.5.8

cpe:2.3:a:haproxy:haproxy:1.5.8
Haproxy » Haproxy » Version: 1.5.9

cpe:2.3:a:haproxy:haproxy:1.5.9
Haproxy » Haproxy » Version: 1.6

cpe:2.3:a:haproxy:haproxy:1.6
Canonical » Ubuntu Linux » Version: 14.10

cpe:2.3:o:canonical:ubuntu_linux:14.10
Canonical » Ubuntu Linux » Version: 15.04

cpe:2.3:o:canonical:ubuntu_linux:15.04
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Opensuse » Openstack Cloud » Version: 5

cpe:2.3:o:opensuse:openstack_cloud:5
Opensuse » Opensuse » Version: 13.2

cpe:2.3:o:opensuse:opensuse:13.2
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3
Redhat » Enterprise Linux Server Aus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Eus » Version: 7.1

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1
Redhat » Enterprise Linux Server Eus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2
Redhat » Enterprise Linux Server Eus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3
Redhat » Enterprise Linux Server Eus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4
Redhat » Enterprise Linux Server Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
Redhat » Enterprise Linux Server Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0
Suse » Linux Enterprise High Availability Extension » Version: 12

cpe:2.3:o:suse:linux_enterprise_high_availability_extension:12

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3281

Products

Pricing

Contact Us