OPENSUSE-SU-2024:14000-1 traefik-3.0.1-1.1 on GA media

These are all security issues fixed in the traefik-3.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13506-1 traefik-2.10.7-1.1 on GA media

These are all security issues fixed in the traefik-2.10.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13007-1 traefik-2.10.1-1.1 on GA media

These are all security issues fixed in the traefik-2.10.1-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-2917 Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik...

GHSA-7JMW-8259-Q9JX vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-7JMW-8259-Q9JX Traefik has unexpected behavior with IPv4-mapped IPv6 addresses

Impact There is a vulnerability in Go managing various Is methods IsPrivate, IsLoopback, etc for IPv4-mapped IPv6 addresses. They didn't work as expected returning false for addresses which would return true in their traditional IPv4 forms. References - CVE-2024-24790 Patches -...

GHSA-7JMW-8259-Q9JX vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

Traefik has unexpected behavior with IPv4-mapped IPv6 addresses

Impact There is a vulnerability in Go managing various Is methods IsPrivate, IsLoopback, etc for IPv4-mapped IPv6 addresses. They didn't work as expected returning false for addresses which would return true in their traditional IPv4 forms. References - CVE-2024-24790 Patches -...

GO-2024-2726 Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik...

GO-2024-2722 Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik

Traefik vulnerable to denial of service with Content-length header in github.com/traefik/traefik...

GO-2024-2880 Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik...

traefik -- Unexpected behavior with IPv4-mapped IPv6 addresses

The traefik authors report: There is a vulnerability in Go managing various Is methods IsPrivate, IsLoopback, etc for IPv4-mapped IPv6 addresses. They didn't work as expected returning false for addresses which would return true in their traditional IPv4 forms...

PT-2024-4045

Name of the Vulnerable Software and Affected Versions net-ip version affected versions not specified Traefik version affected versions not specified Description The issue is related to the incorrect functioning of the Is methods such as IsPrivate, IsLoopback, etc. in the net-ip component of the...

GHSA-F7CQ-5V43-8PWP vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

GHSA-F7CQ-5V43-8PWP Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop

Impact There is a vulnerability in GO managing malformed DNS message, which impacts Traefik. This vulnerability could be exploited to cause a denial of service. References - CVE-2024-24788 Patches - https://github.com/traefik/traefik/releases/tag/v2.11.3 -...

GHSA-F7CQ-5V43-8PWP vulnerabilities

Vulnerabilities for packages: traefik...

Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop

Impact There is a vulnerability in GO managing malformed DNS message, which impacts Traefik. This vulnerability could be exploited to cause a denial of service. References - CVE-2024-24788 Patches - https://github.com/traefik/traefik/releases/tag/v2.11.3 -...

The vulnerability of the Reverse Proxy Server of Containous Traefik, related to insufficient processing of exceptional states, allows a hacker to trigger a service failure.

The vulnerability of the Reverse Proxy server Containous Traefik is related to insufficient handling of exceptional states during the processing of the Content-Length header. This occurs due to an incorrect setting of the read request duration parameter. Exploiting this vulnerability allows a...

PT-2024-6377 · Traefik +9 · Traefik +9

Name of the Vulnerable Software and Affected Versions: Traefik affected versions not specified Description: A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. The issue is related to the net component of the Go programming language, whi...

The vulnerability of the Reverse Proxy Server of Containous Traefik, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Reverse Proxy Server of Containous Traefik is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...