Lucene search
GitHub Advisory DatabaseGHSA-7V4P-328V-8V5GHistoryOct 17, 2023 - 2:37 a.m.
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-1702:37:42
CWE-400
GitHub Advisory Database
github.com
150
traefik
http/2
denial of service
vulnerability
cve-2023-39325
cve-2023-44487
patches
software
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.813
Percentile
98.4%
Impact
A vulnerability CVE-2023-39325 exists in Go managing HTTP/2 requests, which impacts Traefik. This vulnerability could be exploited to cause a denial of service.
References
Patches
Affected configurations
Node
traefikgithub.com\/traefik\/traefikRange<3.0.0-beta4
ORtraefikgithub.com\/traefik\/traefikRange<2.10.5
Related
redhatcve
redhatcve
freebsd
freebsd
traefik -- Resource exhaustion by malicious HTTP/2 client
2023-10-10 00:00:00
redhat
redhat
(RHSA-2023:5810) Important: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update
2023-10-17 18:44:42
(RHSA-2023:5864) Moderate: grafana security update
2023-10-18 21:56:58
(RHSA-2023:5863) Moderate: grafana security update
2023-10-18 21:56:20
oraclelinux
oraclelinux
go-toolset:ol8 security update
2023-10-18 00:00:00
olcne security update
2023-12-07 00:00:00
olcne security update
2023-12-07 00:00:00
osv
osv
Important: go-toolset:rhel8 security update
2023-10-24 18:35:47
Important: go-toolset:rhel8 security update
2023-10-16 00:00:00
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
openvas
openvas
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:4068-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4069-1)
2024-03-04 00:00:00
Fedora: Security Advisory for golang (FEDORA-2023-fe53e13b5b)
2023-10-29 00:00:00
nessus
nessus
RHEL 8 : openshift-gitops-kam (RHSA-2023:6782)
2024-04-28 00:00:00
RHEL 8 / 9 : OpenShift Container Platform 4.12.39 (RHSA-2023:5679)
2024-04-28 00:00:00
RHEL 8 : Red Hat OpenShift Pipelines Client tkn for 1.12.1 (RHSA-2023:6059)
2024-04-28 00:00:00
almalinux
almalinux
Moderate: grafana security update
2023-10-18 00:00:00
Moderate: grafana security update
2023-10-18 00:00:00
Important: go-toolset:rhel8 security update
2023-10-16 00:00:00
rocky
rocky
go-toolset:rhel8 security update
2023-10-24 18:35:47
toolbox security update
2023-11-11 23:00:15
grafana security update
2023-10-24 18:35:47
ibm
ibm
Security Bulletin: IBM DataPower Gateway vulnerable to HTTP/2 "Rapid Reset" Denial of Service (CVE-2023-44487, CVE-2023-39325)
2023-10-26 17:35:42
ubuntucve
ubuntucve
CVE-2023-44487
2023-10-10 00:00:00
CVE-2024-4438
2024-05-08 00:00:00
cve
cve
CVE-2023-6596
2024-04-25 16:15:10
CVE-2024-4438
2024-05-08 09:15:09
cvelist
cvelist
vulnrichment
vulnrichment
amazon
amazon
Important: golang
2023-10-16 13:45:00
Important: golang
2023-10-16 13:45:00
redos
redos
ROS-20240826-01
2024-08-26 00:00:00
nvd
nvd
CVE-2023-6596
2024-04-25 16:15:10
CVE-2024-4438
2024-05-08 09:15:09
fedora
fedora
[SECURITY] Fedora 38 Update: golang-1.20.10-2.fc38
2023-10-29 01:34:45
[SECURITY] Fedora 37 Update: golang-1.20.10-3.fc37
2023-10-29 01:47:29
[SECURITY] Fedora 39 Update: golang-1.21.3-1.fc39
2023-11-03 19:02:38
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.813
Percentile
98.4%
Related for GHSA-7V4P-328V-8V5G