Description
HAProxy中存在拒绝服务漏洞。该漏洞是由于对HTTP Set-Cookie2标头的检查不正确导致的。
HAProxy Set-Cookie2 Header Handling 拒绝服务漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://vulners.com/redhat/RHSA-2022:1021-CVE-2022-0711
https://www.sentinelone.com/vulnerability-database/cve-2022-0711/
https://bugzilla.redhat.com/show_bug.cgi?id=2053666
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:DOS:HAPROXY-SET-COOKIE2.html
https://alas.aws.amazon.com/AL2/ALASHAPROXY2-2023-001.html
https://security-tracker.debian.org/tracker/CVE-2022-0711