ALPINE-CVE-2022-0711 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2022-0711 PUBLISHED CVSS 7.5 HIGH

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.

Risk Scores

CVSS v3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Alpine:v3.13	haproxy	2.2.9-r0, 1.5.11-r0, 1.5.11-r1
Alpine:v3.12	haproxy	1.3.20-r0, 1.3.20-r1, 1.3.20-r2

Timeline

Mar 2, 2022 CVE Published
Nov 19, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2022-0711 advisory

Open in Interactive Console →