Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2277-1

Опубликовано: 06 июл. 2022
Источник: suse-cvrf

Описание

Security update for haproxy

This update for haproxy fixes the following issues:

  • CVE-2022-0711: haproxy: Denial of service via set-cookie2 header (bsc#1196408).

Список пакетов

SUSE Linux Enterprise High Availability Extension 15 SP4
haproxy-2.4.8+git0.d1f8d41e0-150400.3.3.13
openSUSE Leap 15.4
haproxy-2.4.8+git0.d1f8d41e0-150400.3.3.13

Ссылки

Описание

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP4:haproxy-2.4.8+git0.d1f8d41e0-150400.3.3.13
openSUSE Leap 15.4:haproxy-2.4.8+git0.d1f8d41e0-150400.3.3.13
Ссылки