Lucene search
PRIOn knowledge basePRION:CVE-2022-39271HistoryOct 11, 2022 - 2:15 p.m.
Code injection
2022-10-1114:15:00
PRIOn knowledge base
www.prio-n.com
3
traefik
http/2
vulnerability
patch
denial of service
Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer that assists in deploying microservices. There is a potential vulnerability in Traefik managing HTTP/2 connections. A closing HTTP/2 server connection could hang forever because of a subsequent fatal error. This failure mode could be exploited to cause a denial of service. There has been a patch released in versions 2.8.8 and 2.9.0-rc5. There are currently no known workarounds.
Related
osv
osv
Traefik HTTP/2 connections management could cause a denial of service
2022-10-10 21:23:30
CVE-2022-39271
2022-10-11 14:15:09
github
github
Traefik HTTP/2 connections management could cause a denial of service
2022-10-10 21:23:30
nvd
nvd
CVE-2022-39271
2022-10-11 14:15:09
veracode
veracode
Denial Of Service (DoS)
2022-10-12 13:04:50
cve
cve
CVE-2022-39271
2022-10-11 14:15:09
alpinelinux
alpinelinux
CVE-2022-39271
2022-10-11 14:15:00
cvelist
cvelist
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00