Summary
It was discovered that HAProxy incorrectly handled certain headers. A
remote attacker could possibly use this issue to cause HAProxy to stop
responding, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | haproxy | 2.0.13-2ubuntu0.5 |
Vulnerabilities 1
-
Unscored —CVE-2022-0711 EPSS 17%
A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow…
References
-
report
https://ubuntu.com/security/CVE-2022-0711