logo

Database

Asymmetric denial of service - ReDoS In github.com/traefik/traefik

Description

Traefik vulnerable to HTTP/2 request causing denial of service

Impact

A vulnerability CVE-2023-39325 exists in Go managing HTTP/2 requests, which impacts Traefik. This vulnerability could be exploited to cause a denial of service.

References

Patches

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2023-543652. NVD-2023-543653. OSV-GHSA-7v4p-328v-8v5g4. OSV-2023-543655. GHSA-7v4p-328v-8v5g6. GCVE-2023-54365

References

1. https://github.com/traefik/traefik/security/advisories/GHSA-7v4p-328v-8v5g2. https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ?pli=1

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.