CVE-2015-3281

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.haproxy.org/?p=haproxy-1.5.git%3Ba=commit%3Bh=7ec765568883b2d4e5a2796adbeb492a22ec9bd4
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00023.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1741.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2666.htmlThird Party Advisory
http://www.debian.org/security/2015/dsa-3301Third Party Advisory
http://www.haproxy.org/news.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/75554Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2668-1Third Party Advisory
http://git.haproxy.org/?p=haproxy-1.5.git%3Ba=commit%3Bh=7ec765568883b2d4e5a2796adbeb492a22ec9bd4
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00023.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1741.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2666.htmlThird Party Advisory
http://www.debian.org/security/2015/dsa-3301Third Party Advisory
http://www.haproxy.org/news.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/75554Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2668-1Third Party Advisory

Timeline

Published: Jul 6, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-32824.3vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network.CVE-2015-32836.8OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors.CVE-2015-32842.1pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands.CVE-2015-32852.1The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local us CVE-2015-32864.6Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to cause a denial of service (panic or deadlock)CVE-2015-32887.8mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of se CVE-2015-32894.0OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly usin CVE-2015-32907.2arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly relies on espfix64 during nested NMI processing CVE-2015-32912.1arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is CVE-2015-329210.0The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) se CVE-2015-32934.0FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag debug application httpd" command.CVE-2015-32946.4The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remot