Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers to cause a denial of service (negative array index usage and crash) via an HTTP header with a certain number of values, related to the MAX_HDR_HISTORY variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HAProxy Negative Occurrence Count 拒绝服务漏洞
Vulnerability Description
HAProxy是法国HAProxy公司的一款开源的TCP/HTTP负载均衡服务器。该服务器提供4层、7层代理，并能支持上万级别的连接，具有高效、稳定等特点。 HAProxy 1.5版本中的http_get_hdr()函数或HAProxy 1.4版本中的get_ip_from_hdr2()函数中存在安全漏洞。当配置使用‘- hdr_ip(<name>, <value>) (HAProxy 1.4版本)’或‘- hdr_*(<name>, <value>)(HAProxy 1.5版本)’函数且其中<value
CVSS Information
N/A
Vulnerability Type
N/A