Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HAProxy HTTP请求处理拒绝服务漏洞
Vulnerability Description
HAProxy提供高可用性、负载均衡以及基于TCP和HTTP应用的代 理，支持虚拟主机，它是免费、快速并且可靠的一种解决方案。 HAProxy 1.4至1.4.22版本，1.5-dev至1.5-dev17版本中存在缓冲区溢出漏洞，当HTTP keep-alive启用时，程序在TCP检查规则中使用HTTP关键字，与添加到请求中的重写规则同时运行。通过特制的阻止请求重新调整发生流水线的HTTP请求，远程攻击者利用该漏洞导致拒绝服务（崩溃）也可能执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A