Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:44572
HistoryDec 05, 2023 - 7:48 a.m.

Denial Of Service (DoS)

2023-12-0507:48:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
denial of service
traefik
lets encrypt

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

42.0%

JSON

github.com/traefik/traefik is vulnerable to Denial of Service (DoS). The vulnerability occurs when using the HTTPChallenge method for Lets Encrypt certificate renewals. The vulnerability exploits a 50-second window during the challenge validation process, allowing attackers to bombard the system with requests and exhaust resources, causing denial of service conditions.

References

Related

osv 7
cgr 1
alpinelinux 1
cve 1
github 1
wolfi 1
prion 1
cvelist 1
nvd 1
osv
osv
CGA-w5f8-74cv-xhp5
2024-06-06 12:29:41
Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik
2024-08-21 14:30:24
Traefik vulnerable to potential DDoS via ACME HTTPChallenge
2023-12-05 18:12:37
cgr
cgr
CVE-2023-47124 vulnerabilities
2024-05-19 03:07:16
alpinelinux
alpinelinux
CVE-2023-47124
2023-12-04 21:15:33
cve
cve
CVE-2023-47124
2023-12-04 21:15:33
github
github
Traefik vulnerable to potential DDoS via ACME HTTPChallenge
2023-12-05 18:12:37
wolfi
wolfi
CVE-2023-47124 vulnerabilities
2024-09-27 21:56:47
prion
prion
Code injection
2023-12-04 21:15:00
cvelist
cvelist
CVE-2023-47124 Denial of service whith ACME HTTPChallenge in Traefik
2023-12-04 20:20:30
nvd
nvd
CVE-2023-47124
2023-12-04 21:15:33

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

42.0%

JSON
Related for VERACODE:44572
osv7cgr1alpinelinux1cve1github1wolfi1prion1cvelist1nvd1