logo

Database

Improper resource allocation In github.com/traefik/traefik

Description

Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2023-471242. NVD-2023-471243. OSV-GO-2023-23814. OSV-2023-471245. GHSA-8g85-whqh-cr2f6. GCVE-2023-471247. GHSA-8g85-whqh-cr2f

References

1. https://doc.traefik.io/traefik/https/acme/#dnschallenge2. https://doc.traefik.io/traefik/https/acme/#httpchallenge3. https://doc.traefik.io/traefik/https/acme/#tlschallenge4. https://github.com/traefik/traefik/releases/tag/v2.10.65. https://github.com/traefik/traefik/releases/tag/v3.0.0-beta56. https://www.cloudflare.com/learning/ddos/ddos-attack-tools/slowloris7. https://github.com/traefik/traefik/security/advisories/GHSA-8g85-whqh-cr2f

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-IL1ZB – Vulnerability | Fluid Attacks Database