CVE-2022-0711
- Source
- https://cve.org/CVERecord?id=CVE-2022-0711
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0711.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-0711
- Aliases
- Downstream
- Related
- Published
- 2022-03-02T22:15:08.313Z
- Modified
- 2026-02-12T08:36:18.057014Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.
- References
-
- https://www.mail-archive.com/haproxy%40formilux.org/msg41833.html
- https://access.redhat.com/security/cve/cve-2022-0711
- https://github.com/haproxy/haproxy/commit/bfb15ab34ead85f64cd6da0e9fb418c9cd14cee8
- https://www.debian.org/security/2022/dsa-5102
- https://github.com/haproxy/haproxy/commit/bfb15ab34ead85f64cd6da0e9fb418c9cd14cee8
Affected packages
Git
git.haproxy.org/haproxy-2.2.git
Affected ranges
- Type
- GIT
- Repo
- https://git.haproxy.org/haproxy-2.2.git
- Events
-
Introduced3a00c915fd241fc398a080a11ccac9c5c46791ceFixedd8e6e4b63fc323c98f9bdd6d160a20bce0d02770
git.haproxy.org/haproxy-2.3.git
Affected ranges
- Type
- GIT
- Repo
- https://git.haproxy.org/haproxy-2.3.git
- Events
-
Introduced1c0a722a83e7c45456a2b82c15889ab9ab5c4948Fixed55c4c21958ebeb5ecb23aa404bafc5d558e4a0d7