All vulnerabilities

Servers and applications

CVE-2014-6269

Multiple integer overflows in the http_request_forward_body function in proto_http.c in HAProxy 1.5-dev23 before 1.5.4 allow remote attackers to cause a denial of service (crash) via a large stream of data, which triggers a buffer overflow and an out-of-bounds read.

Severity
Medium 5.0
Published
30 Sept 2014
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
HAProxyServers and applications · cpe:a:haproxy:haproxy
  • Version 1.5.3
  • Version 1.5.2
  • Version 1.5.1
  • Version 1.5.0
All 8 release lines
  • Version 1.5-dev23
  • Version 1.5-dev24
  • Version 1.5-dev25
  • Version 1.5-dev26
  • Version 1.5.0
  • Version 1.5.1
  • Version 1.5.2
  • Version 1.5.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2014-6269
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2014-6269