VDB
EN
HIGH 7.5

GHSA-5r5h-q934-cccp

Calico Typha denial of service vulnerability

빠른 조치

GHSA-5r5h-q934-cccp — github.com/projectcalico/calico: 아래 명령으로 수정 버전으로 올리세요. 

go get github.com/projectcalico/calico@v3.26.3

상세

In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake() call is performed inside the main server handle for loop without any timeout allowing an unclean TLS handshake to block the main loop indefinitely while other connections will be idle waiting for that handshake to finish.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

Go / github.com/projectcalico/calico
최초 영향 버전: 3.26.0 수정 버전: 3.26.3
수정 go get github.com/projectcalico/calico@v3.26.3
Go / github.com/projectcalico/calico
최초 영향 버전: 0

No fixed version published yet for github.com/projectcalico/calico (go modules). Pin to a known-safe version or switch to an alternative.

참고