Lucene search

GoogleOSV:GHSA-F7CQ-5V43-8PWP

HistoryMay 23, 2024 - 3:19 p.m.

Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop

2024-05-2315:19:41

Google

osv.dev

traefik

dns

vulnerability

denial of service

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.3%

JSON

Impact

There is a vulnerability in GO managing malformed DNS message, which impacts Traefik.
This vulnerability could be exploited to cause a denial of service.

References

CVE-2024-24788

Patches

Workarounds

No workaround.

For more information

If you have any questions or comments about this advisory, please open an issue.

CPENameOperatorVersion
github.com/traefik/traefik/v2lt2.11.3
github.com/traefik/traefikle1.7.34
github.com/traefik/traefik/v3lt3.0.1

Name	Operator	Version
github.com/traefik/traefik/v2	lt	2.11.3
github.com/traefik/traefik	le	1.7.34
github.com/traefik/traefik/v3	lt	3.0.1

References

github.com/advisories/GHSA-5fq7-4mxc-535h

github.com/traefik/traefik

github.com/traefik/traefik/releases/tag/v2.11.3

github.com/traefik/traefik/releases/tag/v3.0.1

github.com/traefik/traefik/security/advisories/GHSA-f7cq-5v43-8pwp

www.cve.org/CVERecord?id=CVE-2024-24788