Containous Traefik Security Vulnerability

Containous Traefik is an open source reverse proxy and load balancing tool. A security vulnerability exists in Containous Traefik versions prior to 2.11.6, 3.0.4, and 3.1.0-rc3, which stems from a vulnerability that allows HTTP/3 Early Data Requests in the QUIC 0-RTT handshake sent via a spoofed ...

PT-2024-28446 · Traefik +1 · Traefik +1

Name of the Vulnerable Software and Affected Versions: Traefik versions prior to 2.11.6, 3.0.4, and 3.1.0-rc3 Description: The issue allows bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes sent with spoofed IP addresses. This occurs because HTTP/3 servers process...

traefik -- Bypassing IP allow-lists via HTTP/3 early data requests

The traefik authors report: There is a vulnerability in Traefik that allows bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes sent with spoofed IP addresses...

GO-2024-2941 ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik

ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik...

OPENSUSE-SU-2024:14076-1 traefik2-2.11.5-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.5-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : traefik -- Azure Identity Libraries Elevation of Privilege Vulnerability (82830965-3073-11ef-a17d-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 82830965-3073-11ef-a17d-5404a68ad561 advisory. The traefik authors report: There is a vulnerability in Azure Identity Libraries and Microsoft...

GHSA-RVJ4-Q8Q5-8GRF vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

GHSA-RVJ4-Q8Q5-8GRF vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-RVJ4-Q8Q5-8GRF ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability

Impact There is a vulnerability in Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability. References - CVE-2024-35255 Patches - https://github.com/traefik/traefik/releases/tag/v2.11.5 - https://github.com/traefik/traefik/releases/tag/v3.0.3 Workarounds...

ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability

Impact There is a vulnerability in Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability. References - CVE-2024-35255 Patches - https://github.com/traefik/traefik/releases/tag/v2.11.5 - https://github.com/traefik/traefik/releases/tag/v3.0.3 Workarounds...

FreeBSD : traefik -- Unexpected behavior with IPv4-mapped IPv6 addresses (219aaa1e-2aff-11ef-ab37-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 219aaa1e-2aff-11ef-ab37-5404a68ad561 advisory. The traefik authors report: There is a vulnerability in Go managing various Is methods IsPrivate,...

OPENSUSE-SU-2024:13927-1 traefik-2.11.2-1.1 on GA media

These are all security issues fixed in the traefik-2.11.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13506-1 traefik-2.10.7-1.1 on GA media

These are all security issues fixed in the traefik-2.10.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13007-1 traefik-2.10.1-1.1 on GA media

These are all security issues fixed in the traefik-2.10.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14000-1 traefik-3.0.1-1.1 on GA media

These are all security issues fixed in the traefik-3.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12615-1 traefik-2.9.6-1.1 on GA media

These are all security issues fixed in the traefik-2.9.6-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-2917 Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik...

GHSA-7JMW-8259-Q9JX vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-7JMW-8259-Q9JX vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

GHSA-7JMW-8259-Q9JX Traefik has unexpected behavior with IPv4-mapped IPv6 addresses

Impact There is a vulnerability in Go managing various Is methods IsPrivate, IsLoopback, etc for IPv4-mapped IPv6 addresses. They didn't work as expected returning false for addresses which would return true in their traditional IPv4 forms. References - CVE-2024-24790 Patches -...