Traefik has unexpected behavior with IPv4-mapped IPv6 addresses

Impact There is a vulnerability in Go managing various Is methods IsPrivate, IsLoopback, etc for IPv4-mapped IPv6 addresses. They didn't work as expected returning false for addresses which would return true in their traditional IPv4 forms. References - CVE-2024-24790 Patches -...

GO-2024-2726 Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik...

GO-2024-2722 Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik...

GO-2024-2880 Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik...

traefik -- Unexpected behavior with IPv4-mapped IPv6 addresses

The traefik authors report: There is a vulnerability in Go managing various Is methods IsPrivate, IsLoopback, etc for IPv4-mapped IPv6 addresses. They didn't work as expected returning false for addresses which would return true in their traditional IPv4 forms...

PT-2024-4045

Name of the Vulnerable Software and Affected Versions net-ip version affected versions not specified Traefik version affected versions not specified Description The issue is related to the incorrect functioning of the Is methods such as IsPrivate, IsLoopback, etc. in the net-ip component of the...

GHSA-F7CQ-5V43-8PWP vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-F7CQ-5V43-8PWP vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

GHSA-F7CQ-5V43-8PWP Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop

Impact There is a vulnerability in GO managing malformed DNS message, which impacts Traefik. This vulnerability could be exploited to cause a denial of service. References - CVE-2024-24788 Patches - https://github.com/traefik/traefik/releases/tag/v2.11.3 -...

Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop

Impact There is a vulnerability in GO managing malformed DNS message, which impacts Traefik. This vulnerability could be exploited to cause a denial of service. References - CVE-2024-24788 Patches - https://github.com/traefik/traefik/releases/tag/v2.11.3 -...

The vulnerability of the Reverse Proxy Server of Containous Traefik, related to insufficient processing of exceptional states, allows a hacker to trigger a service failure.

The vulnerability of the Reverse Proxy server Containous Traefik is related to insufficient handling of exceptional states during the processing of the Content-Length header. This occurs due to an incorrect setting of the read request duration parameter. Exploiting this vulnerability allows a...

PT-2024-6377 · Traefik +9 · Traefik +9

Name of the Vulnerable Software and Affected Versions: Traefik affected versions not specified Description: A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. The issue is related to the net component of the Go programming language, whi...

The vulnerability of the Reverse Proxy Server of Containous Traefik, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Reverse Proxy Server of Containous Traefik is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Denial Of Service

github.com/traefik/traefik is vulnerable to Denial Of Service. The vulnerability is due to a lack of header frame limits, allowing an attacker to send excessive CONTINUATION frames which causes the endpoint to read arbitrary amounts of header data without proper memory allocation limits...

SUSE CVE-2024-28869

Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of...

GHSA-7F4J-64P6-5H5V Traefik affected by HTTP/2 CONTINUATION flood in net/http

There is a potential vulnerability in Traefik managing HTTP/2 connections. More details in the CVE-2023-45288. Patches - https://github.com/traefik/traefik/releases/tag/v2.11.2 - https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5 Workarounds No workaround For more information If you have...

GHSA-7F4J-64P6-5H5V vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-7F4J-64P6-5H5V vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

Traefik affected by HTTP/2 CONTINUATION flood in net/http

There is a potential vulnerability in Traefik managing HTTP/2 connections. More details in the CVE-2023-45288. Patches - https://github.com/traefik/traefik/releases/tag/v2.11.2 - https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5 Workarounds No workaround For more information If you have...

Denial Of Service (DoS)

Traefik is vulnerable to a Denial Of Service DoS. The vulnerability is due improper input validation when managing requests with a Content-length and no body. An attacker can send a GET request to any Traefik endpoint with the Content-length request header which results in an indefinite hang due ...