This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page. View CVE-2022-0711 →

ALPINE-CVE-2022-0711

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HT...

Original description

The description as published by the source.

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Alpine:v3.12 haproxy

[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.21-r0"}]}]

Alpine:v3.13 haproxy

[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.21-r0"}]}]

References

advisory security.alpinelinux.org