Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-7595

Высокий

ALT-PU-2024-7595: package traefik update to version 2.11.2-alt1

Источник
errata.altlinux.org
Дата публикации
08.05.2024
Дата обновления
04.02.2026
Устраненные уязвимости
4

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades traefik to version 2.11.2-alt1.

Устраненные уязвимости4

Связанные уязвимости

CVSS3: 7.5
redhat
больше 2 лет назад

Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of service. This vulnerability has been addressed in version 2.11.2 and 3.0.0-rc5. Users are advised to upgrade. For affected versions, this vulnerability can be mitigated by configuring the readTimeout option.

CVSS3: 7.5
nvd
больше 2 лет назад

Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of service. This vulnerability has been addressed in version 2.11.2 and 3.0.0-rc5. Users are advised to upgrade. For affected versions, this vulnerability can be mitigated by configuring the readTimeout option.

CVSS3: 7.5
debian
больше 2 лет назад

Traefik is an HTTP reverse proxy and load balancer. In affected versio ...

CVSS3: 9.8
altlinux
почти 2 года назад

ALT-PU-2024-16593: package `traefik` update to version 2.11.14-alt1

CVSS3: 7.5
github
больше 2 лет назад

Traefik vulnerable to denial of service with Content-length header