Skip to content
Sign in
Not rated

CVE-2022-0711 A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header

Description

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.

Affected products and versions

Product Affected versions Fixed in
haproxy 2.5.1 No fix stated

Other CVEs of haproxy

The 3 CVEs of haproxy →
CVE-2023-0836 An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before… 7.5 High CVE-2023-0056 An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service 6.5 Medium
Track this CVE