Cette page suit l'état du correctif pour Alpine Linux. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2022-0711 →
ALPINE-CVE-2022-0711
A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HT...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Alpine:v3.12
haproxy
[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.21-r0"}]}]
Alpine:v3.13
haproxy
[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.21-r0"}]}]
Références
- advisory security.alpinelinux.org