Denial of Service Vulnerability in OpenShift HAProxy Cartridge by Red Hat
CVE-2013-0163

5.5MEDIUM

Key Information:

Vendor

Openshift Haproxy Cartridge

Status
Openshift Haproxy Cartridge
Vendor
CVE Published:
5 December 2019

What is CVE-2013-0163?

The OpenShift HAProxy cartridge has a vulnerability that allows for a predictable temporary directory in the set-proxy connection hook. This could potentially be exploited by an attacker to execute a denial of service attack, disrupting service availability. Users of this product should ensure they are aware of this vulnerability and apply any necessary patches or workarounds to mitigate risks.

Affected Version(s)

OpenShift haproxy cartridge through 2013-01-08

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0163
x_refsource_MISC
https://access.redhat.com/security/cve/cve-2013-0163
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.