The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.
2015-07-06T15:59:06.167
2025-04-12T10:46:40.837
Deferred
CVSSv2: 5.0 (MEDIUM)
AV:N/AC:L/Au:N/C:P/I:N/A:N
10.0
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | debian | debian_linux | 8.0 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5 | Yes |
| Application | haproxy | haproxy | 1.5.0 | Yes |
| Application | haproxy | haproxy | 1.5.1 | Yes |
| Application | haproxy | haproxy | 1.5.2 | Yes |
| Application | haproxy | haproxy | 1.5.3 | Yes |
| Application | haproxy | haproxy | 1.5.4 | Yes |
| Application | haproxy | haproxy | 1.5.5 | Yes |
| Application | haproxy | haproxy | 1.5.6 | Yes |
| Application | haproxy | haproxy | 1.5.7 | Yes |
| Application | haproxy | haproxy | 1.5.8 | Yes |
| Application | haproxy | haproxy | 1.5.9 | Yes |
| Application | haproxy | haproxy | 1.5.10 | Yes |
| Application | haproxy | haproxy | 1.5.11 | Yes |
| Application | haproxy | haproxy | 1.5.12 | Yes |
| Application | haproxy | haproxy | 1.5.13 | Yes |
| Application | haproxy | haproxy | 1.6 | Yes |
| Operating System | canonical | ubuntu_linux | 14.10 | Yes |
| Operating System | canonical | ubuntu_linux | 15.04 | Yes |
| Operating System | opensuse | openstack_cloud | 5 | Yes |
| Operating System | opensuse | opensuse | 13.2 | Yes |
| Operating System | suse | linux_enterprise_high_availability_extension | 12 | Yes |
| Operating System | redhat | enterprise_linux_desktop | 7.0 | Yes |
| Operating System | redhat | enterprise_linux_server | 7.0 | Yes |
| Operating System | redhat | enterprise_linux_server_aus | 7.3 | Yes |
| Operating System | redhat | enterprise_linux_server_aus | 7.4 | Yes |
| Operating System | redhat | enterprise_linux_server_aus | 7.6 | Yes |
| Operating System | redhat | enterprise_linux_server_eus | 7.1 | Yes |
| Operating System | redhat | enterprise_linux_server_eus | 7.2 | Yes |
| Operating System | redhat | enterprise_linux_server_eus | 7.3 | Yes |
| Operating System | redhat | enterprise_linux_server_eus | 7.4 | Yes |
| Operating System | redhat | enterprise_linux_server_eus | 7.5 | Yes |
| Operating System | redhat | enterprise_linux_server_eus | 7.6 | Yes |
| Operating System | redhat | enterprise_linux_server_tus | 7.3 | Yes |
| Operating System | redhat | enterprise_linux_server_tus | 7.6 | Yes |
| Operating System | redhat | enterprise_linux_workstation | 7.0 | Yes |