CVE-2014-6269

{"id": "CVE-2014-6269", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-09-30T14:55:11.453", "references": [{"url": "http://article.gmane.org/gmane.comp.web.haproxy/17726", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://article.gmane.org/gmane.comp.web.haproxy/18097", "source": "cve@mitre.org"}, {"url": "http://git.haproxy.org/?p=haproxy-1.5.git%3Ba=commitdiff%3Bh=b4d05093bc89f71377230228007e69a1434c1a0c", "source": "cve@mitre.org"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-1292.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/59936", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/61507", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2014/09/09/23", "source": "cve@mitre.org"}, {"url": "http://article.gmane.org/gmane.comp.web.haproxy/17726", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://article.gmane.org/gmane.comp.web.haproxy/18097", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://git.haproxy.org/?p=haproxy-1.5.git%3Ba=commitdiff%3Bh=b4d05093bc89f71377230228007e69a1434c1a0c", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-1292.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/59936", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/61507", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2014/09/09/23", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-189"}]}], "descriptions": [{"lang": "en", "value": "Multiple integer overflows in the http_request_forward_body function in proto_http.c in HAProxy 1.5-dev23 before 1.5.4 allow remote attackers to cause a denial of service (crash) via a large stream of data, which triggers a buffer overflow and an out-of-bounds read."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de enteros en la funci\u00f3n http_request_forward_body en proto_http.c en HAProxy 1.5-dev23 anterior a 1.5.4 permiten a atacantes remotos causar una denegaci\u00f3n de servicio (ca\u00edda) a trav\u00e9s de un flujo grande de datos, lo que provoca un desbordamiento de buffer y una lectura fuera de rango."}], "lastModified": "2024-11-21T02:14:03.530", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:haproxy:haproxy:1.5:dev23:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "102F3A11-6B72-4A17-94D9-C42BD64B5938"}, {"criteria": "cpe:2.3:a:haproxy:haproxy:1.5:dev24:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E806EB6-3E27-4C0C-9108-58E1A58B7C0C"}, {"criteria": "cpe:2.3:a:haproxy:haproxy:1.5:dev25:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A8EC32E-8A94-4952-AF27-68D0309DF1DA"}, {"criteria": "cpe:2.3:a:haproxy:haproxy:1.5:dev26:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F1D7768-3ECC-4E3A-998E-F471274CB7F1"}, {"criteria": "cpe:2.3:a:haproxy:haproxy:1.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8346999-B3EE-4BBA-ABEA-F9D07017EBAC"}, {"criteria": "cpe:2.3:a:haproxy:haproxy:1.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DD95164-7653-4433-97AB-8D0BA0B89828"}, {"criteria": "cpe:2.3:a:haproxy:haproxy:1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA2EA9FE-BCD8-483D-91B2-FCDD096E9F68"}, {"criteria": "cpe:2.3:a:haproxy:haproxy:1.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBF8DB5D-B3DC-4EAC-A3A7-06846615980A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}