Intrusion PreventionHAProxy.Reqdeny.DoS
Description
This indicates an attempt to exploit a Denial of Service vulnerability in HAProxy.
The vulnerability is due to an error when the vulnerable software handles a malformed HTTP request. A remote attacker may be able to exploit this to cause a denial of service condition on the affected system, via crafted packets.
Affected Products
HAProxy HAProxy 1.6.0 through 1.6.6.
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://git.haproxy.org/?p=haproxy-1.6.git;a=commit;h=60f01f8c89e4fb2723d5a9f2046286e699567e0b
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 42699 |
| Created | Jul 15, 2016 |
| Updated | Oct 13, 2016 |
| Risk |
|
| CVE ID | CVE-2016-5360 |
| Exploit Prediction Score | 1.7% |
| Default Action | drop |
| Active | |
| Affected OS | Linux, Solaris |
| Affected App | Other |