Ubuntu 12.04 LTS USN-1889-1 Moderate HAProxy DoS Threat

ubuntu

June 20, 2013

HAProxy could be made to crash if it received specially crafted network traffic.

Summary

HAProxy could be made to crash if it received specially crafted network

traffic.

Software Description:

- haproxy: fast and reliable load balancing reverse proxy

Details:

David Torgerson discovered that HAProxy incorrectly parsed certain HTTP

headers. A remote attacker could use this issue to cause HAProxy to stop

responding, resulting in a denial of service.

Topics Covered

security advisory moderate denial of service service disruption ubuntu haproxy

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
  haproxy                         1.4.18-0ubuntu3.1

Ubuntu 12.10:
  haproxy                         1.4.18-0ubuntu2.2

Ubuntu 12.04 LTS:
  haproxy                         1.4.18-0ubuntu1.2

In general, a standard system update will make all the necessary changes.