Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-0711

Опубликовано: 02 мар. 2022
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Средний

Описание

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*
Версия от 2.2.0 (включая) до 2.2.21 (исключая)
cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*
Версия от 2.3.0 (включая) до 2.3.18 (исключая)
cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*
Версия от 2.4.0 (включая) до 2.4.13 (исключая)
Конфигурация 2

Одно из

cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%
0.66484
Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-835
CWE-835

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 4 года назад

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.

CVSS3: 7.5
redhat
почти 4 года назад

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.

CVSS3: 7.5
msrc
почти 4 года назад

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.

CVSS3: 7.5
debian
почти 4 года назад

A flaw was found in the way HAProxy processed HTTP responses containin ...

suse-cvrf
больше 3 лет назад

Security update for haproxy

EPSS

Процентиль: 98%
0.66484
Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-835
CWE-835