CVE-2016-5360
high · 7.5HAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, allows remote attackers to cause a denial of service (uninitialized memory access and crash) or possibly have unspecified other impact via unknown vectors.
7.5
CVSS
42.8%
EPSS (exploit prob.)
99th
EPSS percentile
2016-06-30
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| canonical | ubuntu_linux | 16.04 |
| haproxy | haproxy | 1.6.0 |
| haproxy | haproxy | 1.6.1 |
| haproxy | haproxy | 1.6.2 |
| haproxy | haproxy | 1.6.3 |
| haproxy | haproxy | 1.6.4 |
| haproxy | haproxy | 1.6.5 |
Check a specific version with /api/v1/cve/match.
References
- http://git.haproxy.org/?p=haproxy-1.6.git%3Ba=commit%3Bh=60f01f8c89e4fb2723d5a9f2046286e699567e0b
- http://www.openwall.com/lists/oss-security/2016/06/09/5
- http://www.openwall.com/lists/oss-security/2016/06/09/6
- http://www.ubuntu.com/usn/USN-3011-1
- http://git.haproxy.org/?p=haproxy-1.6.git%3Ba=commit%3Bh=60f01f8c89e4fb2723d5a9f2046286e699567e0b
- http://www.openwall.com/lists/oss-security/2016/06/09/5
- http://www.openwall.com/lists/oss-security/2016/06/09/6
- http://www.ubuntu.com/usn/USN-3011-1
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-5360