Intel

AIKIDO-2024-10102

github.com/traefik/traefik/v3 is vulnerable to Denial of Service (DoS)

Denial of Service (DoS)CVE-2024-24787 Published May 24, 2024

40

Medium Risk

This Affects:

Gogithub.com/traefik/traefik/v3
3.0.0 - 3.0.0
Fixed in 3.0.1
Are you affected? Scan for Free

TL;DR

Affected versions of the package are vulnerable to Denial of Service (DoS). There is a vulnerability in GOLANG managing malformed DNS messages, which impacts Traefik.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

github.com/traefik/traefik/v3 is vulnerable to Denial of Service (DoS) in versions 3.0.0 - 3.0.0.

How to fix this

Upgrade the github.com/traefik/traefik/v3 library to the patch version.