CVE-2022-0711CWE-835

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header

published March 2, 2022

CVSS
—
EPSS
17%
Percentile
97.0
In the wild
Unconfirmed
What it is

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16563 · 97.0th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2022-03-02T21:59Z
EPSS history
Timeline
  • 02 MAR 21:59Z
    A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header
    cvelistv5