Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-39271HistoryOct 11, 2022 - 2:15 p.m.
CVE-2022-39271
2022-10-1114:15:00
Alpine Linux Development Team
security.alpinelinux.org
8
traefik
vulnerability
http/2
denial of service
patch
versions
0.001 Low
EPSS
Percentile
36.5%
Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer that assists in deploying microservices. There is a potential vulnerability in Traefik managing HTTP/2 connections. A closing HTTP/2 server connection could hang forever because of a subsequent fatal error. This failure mode could be exploited to cause a denial of service. There has been a patch released in versions 2.8.8 and 2.9.0-rc5. There are currently no known workarounds.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.16-community | noarch | traefik | = 2.6.6-r5 | UNKNOWN |
Related
osv
osv
Traefik HTTP/2 connections management could cause a denial of service
2022-10-10 21:23:30
CVE-2022-39271
2022-10-11 14:15:09
github
github
Traefik HTTP/2 connections management could cause a denial of service
2022-10-10 21:23:30
nvd
nvd
CVE-2022-39271
2022-10-11 14:15:09
prion
prion
Code injection
2022-10-11 14:15:00
veracode
veracode
Denial Of Service (DoS)
2022-10-12 13:04:50
cve
cve
CVE-2022-39271
2022-10-11 14:15:09
cvelist
cvelist
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00