CVE-2022-0711
HIGH7.5EPSS 66.5%haproxy - security update
發布日:2022/3/2修改日:2025/11/19
也稱為:ALPINE-CVE-2022-0711
描述
A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.
受影響套件(4)
- Alpine/haproxyfrom 0, < 2.2.21-r0
- Bitnami/haproxy>= 2.2.0, < 2.2.21, >= 2.3.0, < 2.3.18, >= 2.4.0, < 2.4.13
- Debian/haproxyfrom 0, < 2.2.9-2+deb11u3
- Debian/haproxyfrom 0, < 2.2.9-2+deb11u3
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
參考連結(7)
- ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2022-0711
- ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2022-0711
- WEBhttps://access.redhat.com/security/cve/cve-2022-0711
- WEBhttps://github.com/haproxy/haproxy/commit/bfb15ab34ead85f64cd6da0e9fb418c9cd14cee8
- WEBhttps://nvd.nist.gov/vuln/detail/CVE-2022-0711
- WEBhttps://www.debian.org/security/2022/dsa-5102
- WEBhttps://www.mail-archive.com/haproxy%40formilux.org/msg41833.html