CVE-2024-28869

An improper handling of exceptional conditions vulnerability was found in Traefik. In affected versions, sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration, resulting in a denial of service...

CVE-2024-28869

Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of...

CVE-2024-28869 vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

CVE-2024-28869 vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2024-28869

Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of...

CVE-2024-28869 Possible denial of service vulnerability with Content-length header in Traefik

Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of...

CVE-2024-28869

Technical details about CVE-2024-28869 are not publicly available in the provided Connected documents. The initial description lists vulnerable Traefik versions and fixes, but no additional technical specifics or exploit information are present here. Monitor for updates.

CVE-2024-28869 Possible denial of service vulnerability with Content-length header in Traefik

Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of...

GHSA-4VWX-54MW-VQFW vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-4VWX-54MW-VQFW vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

Traefik vulnerable to denial of service with Content-length header

There is a potential vulnerability in Traefik managing requests with Content-length and no body . Sending a GET request to any Traefik endpoint with the Content-length request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to...

GHSA-4VWX-54MW-VQFW Traefik vulnerable to denial of service with Content-length header

There is a potential vulnerability in Traefik managing requests with Content-length and no body . Sending a GET request to any Traefik endpoint with the Content-length request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to...

Containous Traefik 安全漏洞

Containous Traefik is a reverse proxy and load balancer from Containous Corporation, USA. A security vulnerability exists in Containous Traefik that stems from a Denial of Service DOS vulnerability in the Content-length header. Affected products and versions: Traefik v2.11.0 and earlier, v3.0.0-r...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, kaniko, ko, kargo, buildkitd, buf, conftest, melange, tkn, crossplane, aactl, ctop, datadog-agent-fips, spire-server, kubescape, grype, trivy, cadvisor, syft, wolfictl, zot, loki, cilium-cli, prometheus, docker-compose, spire-server-fips, conftest-fips...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: cadvisor-fips, kaniko, ko, kargo, buildkitd, buf, conftest, melange, tkn, crossplane, aactl, ctop, datadog-agent-fips, spire-server, kubescape, grype, trivy, cadvisor, syft, wolfictl, zot, loki, cilium-cli, prometheus, docker-compose, spire-server-fips, conftest-fips...

PT-2024-3308 · Traefik +1 · Traefik +1

Name of the Vulnerable Software and Affected Versions: Traefik versions prior to 2.11.2 Traefik versions prior to 3.0.0-rc5 Description: The issue is related to insufficient handling of exceptional states when processing Content-Length headers, resulting in an indefinite hang with the default...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: cosign, gitsign, argo-workflows, fulcio, falcoctl, grpc-health-probe, kubernetes-dashboard, apko, spire-server, temporal, guac, zarf, policy-controller, step-ca, rabbitmq-messaging-topology-operator, wolfictl, sigstore-scaffolding, zot, aactl, falco, kube-rbac-proxy,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: bank-vaults, nats, newrelic-infrastructure-agent, doppler-kubernetes-operator, crossplane-provider-aws-memorydb, secrets-store-csi-driver, trivy, aws-efs-csi-driver, crossplane-provider-azure, metrics-server, nfs-subdir-external-provisioner,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: cadvisor-fips, helm-fips, scorecard, kubeflow-katib, kargo, bom, buildkitd, flux-helm-controller, docker-machine-driver-harvester, cert-manager-fips, helm-operator-fips, newrelic-infrastructure-agent, pulumi, kots, chartmuseum, gitsign, cert-manager, aactl, crane,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, helm-fips, scorecard, kubeflow-katib, kargo, bom, buildkitd, flux-helm-controller, docker-machine-driver-harvester, cert-manager-fips, helm-operator-fips, newrelic-infrastructure-agent, pulumi, kots, chartmuseum, gitsign, cert-manager, aactl, crane,...