Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-1587

Высокий

ALT-PU-2023-1587: package traefik update to version 2.9.10-alt1

Источник
errata.altlinux.org
Дата публикации
07.04.2023
Дата обновления
04.02.2026
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades traefik to version 2.9.10-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 7.5
nvd
больше 3 лет назад

Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer for deploying microservices. There is a vulnerability in Go when parsing the HTTP headers, which impacts Traefik. HTTP header parsing could allocate substantially more memory than required to hold the parsed headers. This behavior could be exploited to cause a denial of service. This issue has been patched in versions 2.9.10 and 2.10.0-rc2.

CVSS3: 7.5
debian
больше 3 лет назад

Traefik (pronounced traffic) is a modern HTTP reverse proxy and load b ...

CVSS3: 7.5
github
больше 3 лет назад

Traefik HTTP header parsing could cause a denial of service

CVSS3: 7.5
altlinux
больше 3 лет назад

ALT-PU-2023-1635: package `traefik` update to version 2.9.10-alt1