UpHeron
All vulnerabilities

Servers and applications

CVE-2015-3281

The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.

Severity
Medium 5.0
Published
6 Jul 2015
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
HAProxyServers and applications · cpe:a:haproxy:haproxy
  • Version 1.6-dev0
  • Version 1.5.13
  • Version 1.5.12
  • Version 1.5.11
All 36 release lines
  • Version 1.5-dev
  • Version 1.5-dev0
  • Version 1.5-dev1
  • Version 1.5-dev2
  • Version 1.5-dev3
  • Version 1.5-dev4
  • Version 1.5-dev5
  • Version 1.5-dev6
  • Version 1.5-dev7
  • Version 1.5-dev8
  • Version 1.5-dev9
  • Version 1.5-dev10
  • Version 1.5-dev11
  • Version 1.5-dev12
  • Version 1.5-dev13
  • Version 1.5-dev14
  • Version 1.5-dev15
  • Version 1.5-dev16
  • Version 1.5-dev17
  • Version 1.5-dev18
  • Version 1.5-dev19
  • Version 1.5.0
  • Version 1.5.1
  • Version 1.5.2
  • Version 1.5.3
  • Version 1.5.4
  • Version 1.5.5
  • Version 1.5.6
  • Version 1.5.7
  • Version 1.5.8
  • Version 1.5.9
  • Version 1.5.10
  • Version 1.5.11
  • Version 1.5.12
  • Version 1.5.13
  • Version 1.6-dev0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-3281
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-3281