Lucene search
GoogleOSV:GHSA-F7CQ-5V43-8PWPHistoryMay 23, 2024 - 3:19 p.m.
Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop
2024-05-2315:19:41
Google
osv.dev
5
traefik
go
dns
vulnerability
denial of service
Impact
There is a vulnerability in GO managing malformed DNS message, which impacts Traefik.
This vulnerability could be exploited to cause a denial of service.
References
Patches
- https://github.com/traefik/traefik/releases/tag/v2.11.3
- https://github.com/traefik/traefik/releases/tag/v3.0.1
Workarounds
No workaround.
For more information
If you have any questions or comments about this advisory, please open an issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/traefik/traefik/v2 | lt | 2.11.3 | |
| github.com/traefik/traefik | le | 1.7.34 | |
| github.com/traefik/traefik/v3 | lt | 3.0.1 |
Related
osv
osv
BIT-golang-2024-24788
2024-05-14 07:18:19
Malformed DNS message can cause infinite loop in net
2024-05-07 22:33:51
github
github
wolfi
wolfi
CVE-2024-24788 vulnerabilities
2024-06-22 09:08:24
alpinelinux
alpinelinux
CVE-2024-24788
2024-05-08 16:15:08
cvelist
cvelist
CVE-2024-24788 Malformed DNS message can cause infinite loop in net
2024-05-08 15:31:11
redhatcve
redhatcve
CVE-2024-24788
2024-05-09 04:53:58
freebsd
freebsd
go -- net: malformed DNS message can cause infinite loop
2024-04-25 00:00:00
cgr
cgr
CVE-2024-24788 vulnerabilities
2024-05-19 03:07:16
mageia
mageia
Updated golang packages fix security vulnerability
2024-05-17 21:43:28
nessus
nessus
Golang 1.22.x < 1.22.3 DoS
2024-05-13 00:00:00
FreeBSD : go -- net: malformed DNS message can cause infinite loop (d3847eba-114b-11ef-9c21-901b0e9408dc)
2024-05-13 00:00:00
SUSE SLES12 Security Update : go1.22 (SUSE-SU-2024:1573-1)
2024-05-10 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-24788 affecting package msft-golang for versions less than 1.22.3
2024-06-22 03:09:21
CVE-2024-24788 affecting package golang for versions less than 1.22.3-1
2024-06-22 03:09:14
veracode
veracode
Denial Of Service (DoS)
2024-05-09 06:08:29
debiancve
debiancve
CVE-2024-24788
2024-05-08 16:15:08
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0181)
2024-05-20 00:00:00
openSUSE: Security Advisory for go1.22 (SUSE-SU-2024:1587-1)
2024-05-13 00:00:00
nvd
nvd
CVE-2024-24788
2024-05-08 16:15:08
ubuntucve
ubuntucve
CVE-2024-24788
2024-05-08 00:00:00
cve
cve
CVE-2024-24788
2024-05-08 16:15:08
6.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.4%
Related for OSV:GHSA-F7CQ-5V43-8PWP