Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2013-2175

HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers to cause a denial of service (negative array index usage and crash) via an HTTP header with a certain number of values, related to the MAX_HDR_HISTORY variable.

  • Published: Aug 19, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-2175
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
debian / debian_linux 6.0 6.0.x
canonical / ubuntu_linux 13.04 13.04.x
canonical / ubuntu_linux 12.10 12.10.x
canonical / ubuntu_linux 12.04 12.04.x
redhat / enterprise_linux_load_balancer 6.4 6.4.x
redhat / enterprise_linux_load_balancer 6.0 6.0.x
haproxy / haproxy 1.4.18 1.4.18.x
haproxy / haproxy 1.4.5 1.4.5.x
haproxy / haproxy 1.4.11 1.4.11.x
haproxy / haproxy 1.4.10 1.4.10.x
haproxy / haproxy 1.4.1 1.4.1.x
haproxy / haproxy 1.4.7 1.4.7.x
haproxy / haproxy 1.4.21 1.4.21.x
haproxy / haproxy 1.4.4 1.4.4.x
haproxy / haproxy 1.4.19 1.4.19.x
haproxy / haproxy 1.4 1.4.x
haproxy / haproxy 1.4.2 1.4.2.x
haproxy / haproxy 1.4.20 1.4.20.x
haproxy / haproxy 1.4.13 1.4.13.x
haproxy / haproxy 1.4.23 1.4.23.x
haproxy / haproxy 1.4.16 1.4.16.x
haproxy / haproxy 1.4.8 1.4.8.x
haproxy / haproxy 1.4.14 1.4.14.x
haproxy / haproxy 1.4.17 1.4.17.x
haproxy / haproxy 1.4.22 1.4.22.x
haproxy / haproxy 1.4.0 1.4.0.x
haproxy / haproxy 1.4.3 1.4.3.x
haproxy / haproxy 1.4.12 1.4.12.x
haproxy / haproxy 1.4.9 1.4.9.x
haproxy / haproxy 1.4.6 1.4.6.x
haproxy / haproxy 1.4.15 1.4.15.x
haproxy / haproxy 1.5-dev7 1.5-dev7.x
haproxy / haproxy 1.5-dev 1.5-dev.x
haproxy / haproxy 1.5-dev4 1.5-dev4.x
haproxy / haproxy 1.5-dev1 1.5-dev1.x
haproxy / haproxy 1.5-dev10 1.5-dev10.x
haproxy / haproxy 1.5-dev6 1.5-dev6.x
haproxy / haproxy 1.5-dev15 1.5-dev15.x
haproxy / haproxy 1.5-dev13 1.5-dev13.x
haproxy / haproxy 1.5-dev16 1.5-dev16.x
haproxy / haproxy 1.5-dev12 1.5-dev12.x
haproxy / haproxy 1.5-dev3 1.5-dev3.x
haproxy / haproxy 1.5-dev0 1.5-dev0.x
haproxy / haproxy 1.5-dev18 1.5-dev18.x
haproxy / haproxy 1.5-dev9 1.5-dev9.x
haproxy / haproxy 1.5-dev2 1.5-dev2.x
haproxy / haproxy 1.5-dev8 1.5-dev8.x
haproxy / haproxy 1.5-dev17 1.5-dev17.x
haproxy / haproxy 1.5-dev11 1.5-dev11.x
haproxy / haproxy 1.5-dev5 1.5-dev5.x
haproxy / haproxy 1.5-dev14 1.5-dev14.x