CVE-2024-28869

Katalog CVE

CVSS 7.5 · High EPSS 1,0%

Kerentanan Improper Handling of Exceptional Conditions pada traefik. Skor CVSS 3.1 7.5 (High) menurut github.com.

Deskripsi (NVD)

Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint with the "Content-length" request header results in an indefinite hang with the default configuration. This vulnerability can be exploited by attackers to induce a denial of service. This vulnerability has been addressed in version 2.11.2 and 3.0.0-rc5. Users are advised to upgrade. For affected versions, this vulnerability can be mitigated by configuring the readTimeout option.

Rincian

Terbit di NVD

12 April 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-755: Improper Handling of Exceptional Conditions

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 63,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/traefik/traefik/security/advisories/GHSA-4vwx-54mw-vqfw patch · advisory vendor
• https://github.com/traefik/traefik/commit/240b83b77351dfd8cadb91c305b84e9d22e0f9c6 patch
• https://doc.traefik.io/traefik/routing/entrypoints/#respondingtimeouts product
• https://github.com/traefik/traefik/releases/tag/v2.11.2 release notes
• https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5 release notes