GO-2024-2689 Temporal Server Denial of Service in go.temporal.io/server

Temporal Server Denial of Service in go.temporal.io/server...

Denial Of Service (DoS)

Temporal Server is vulnerable to Denial of Service DoS. The vulnerability is caused by an authenticated user with permissions to interact with workflows submitting an invalid UTF-8 string which causes an application crash. This can lead to stuck tasks in the queue, increased queue lag, resource...

GHSA-WMXC-V39R-P9WF Temporal Server Denial of Service

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

Temporal Server Denial of Service

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

CVE-2024-2689

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

CVE-2024-2689 Denial of Service if invalid UTF-8 sent

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

CVE-2024-2689

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

CVE-2024-2689

Summary: CVE-2024-2689 is a Temporal Server DoS affecting versions 1.20.5, 1.21.6 and 1.22.7 where an authenticated user with workflow permissions can submit an invalid UTF-8 string to trigger a crashloop, causing queue lag and eventual resource exhaustion. The logs may reveal the failing workflo...

CVE-2024-2689 Denial of Service if invalid UTF-8 sent

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

CVE-2024-2689 Denial of Service if invalid UTF-8 sent

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

Temporal Server 安全漏洞

Temporal Server is a microservices orchestration platform from Temporal. A security vulnerability exists in Temporal Server versions prior to 1.20.5, 1.21.6, and 1.22.7, which stems from a vulnerability that allows an attacker to interact with a workflow and craft invalid UTF-8 strings for...

CVE-2024-2689: Improper Input Validation

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

PT-2024-21562

Name of the Vulnerable Software and Affected Versions Temporal Server versions prior to 1.20.5 Temporal Server versions prior to 1.21.6 Temporal Server versions prior to 1.22.7 Description The issue allows an authenticated user with permissions to interact with workflows to potentially cause a...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: trillian-fips, temporal-server-fips, caddy, step-ca, amass, trillian, argo-workflows-fips, step, kots, falcosidekick-fips, caddy-fips, argo-workflows, src, k3s, kine, kube-bench, temporal-server, ferretdb, spicedb, kube-bench-fips, wavefront-collector-for-kubernetes...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kine, kots, step, k3s, kube-bench, src, temporal-server, caddy, step-ca, amass, trillian, ferretdb, argo-workflows, spicedb...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: up, buildkitd, amass, volume-modifier-for-k8s, docker-compose, kubernetes, falcosidekick-fips, influx, eksctl, frp, aws-flb-kinesis, metrics-server-fips, syft, kube-logging-operator, aws-ebs-csi-driver, kube-fluentd-operator, spark-operator, kube-state-metrics-fips,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: trillian-fips, temporal-server-fips, caddy, step-ca, amass, trillian, argo-workflows-fips, step, kots, falcosidekick-fips, caddy-fips, argo-workflows, src, k3s, kine, kube-bench, temporal-server, ferretdb, spicedb, kube-bench-fips, wavefront-collector-for-kubernetes...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: kine, kots, step, k3s, kube-bench, src, temporal-server, caddy, step-ca, amass, trillian, ferretdb, argo-workflows, spicedb...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: trillian-fips, temporal-server-fips, caddy, step-ca, amass, trillian, argo-workflows-fips, step, kots, falcosidekick-fips, caddy-fips, argo-workflows, src, k3s, kine, kube-bench, temporal-server, ferretdb, spicedb, kube-bench-fips, wavefront-collector-for-kubernetes...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: buildkitd, kine, temporal-server, k3s, temporal, kubevela, kubernetes, metrics-server, kubescape, volume-modifier-for-k8s, docker-compose, cri-tools, envoy-ratelimit, kubernetes-csi-external-resizer...