onyx --cves cve-2015-3281
CVE-2015-3281
- score
- <0.1
- cvss
- 5.0
- epss
- 4.3%
- published
- 2015-07-06
- kev added
- —
- first seen
HAProxy 1.5.x before 1.5.14 and 1.6-dev contains a buffer over-read caused by improper realignment in buffer_slow_realign, letting remote attackers access uninitialized memory contents via crafted requests, exploit requires sending malicious requests.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 9
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html
- http://rhn.redhat.com/errata/RHSA-2015-1741.html
- http://www.debian.org/security/2015/dsa-3301
- http://www.ubuntu.com/usn/USN-2668-1
- http://git.haproxy.org/?p=haproxy-1.5.git%3Ba=commit%3Bh=7ec765568883b2d4e5a2796adbeb492a22ec9bd4
- http://www.haproxy.org/news.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00023.html
- http://rhn.redhat.com/errata/RHSA-2015-2666.html
- http://www.securityfocus.com/bid/75554