—
GO-2024-2880
Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik
Quick fix
GO-2024-2880 — github.com/traefik/traefik/v2: upgrade to the fixed version with the command below.
go get github.com/traefik/traefik/v2@v2.11.3Details
Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/traefik/traefik
Introduced in:
0 No fixed version published yet for github.com/traefik/traefik (go modules). Pin to a known-safe version or switch to an alternative.
Go / github.com/traefik/traefik/v2
Introduced in:
0 Fixed in: 2.11.3 Fix
go get github.com/traefik/traefik/v2@v2.11.3 Go / github.com/traefik/traefik/v3
Introduced in:
0 Fixed in: 3.0.1 Fix
go get github.com/traefik/traefik/v3@v3.0.1 References
- https://github.com/traefik/traefik/security/advisories/GHSA-f7cq-5v43-8pwp [ADVISORY]
- https://github.com/advisories/GHSA-5fq7-4mxc-535h [WEB]
- https://github.com/traefik/traefik/releases/tag/v2.11.3 [WEB]
- https://github.com/traefik/traefik/releases/tag/v3.0.1 [WEB]
- https://www.cve.org/CVERecord?id=CVE-2024-24788 [WEB]