Multiple integer overflows in the http_request_forward_body function in proto_http.c in HAProxy 1.5-dev23 before 1.5.4 allow remote attackers to cause a denial of service (crash) via a large stream of data, which triggers a buffer overflow and an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade haproxy | Dec 1, 2016 | Sep 30, 2014 |
| Debian | — | Upgrade haproxy | Jul 30, 2024 | Sep 30, 2014 |
| Oracle_linux | — | Upgrade haproxy | Oct 16, 2024 | Sep 30, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 5, 2014 |
| Suse | — | Upgrade haproxy | Feb 4, 2022 | Sep 30, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub