Lucene search
Veracode Vulnerability DatabaseVERACODE:40293HistoryApr 26, 2023 - 11:09 a.m.
Denial Of Service (DoS)
2023-04-2611:09:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
denial of service
traefik
http headers
vulnerability
memory allocation
application crash
software
0.001 Low
EPSS
Percentile
39.7%
traefik is vulnerable to Denial of Service (DoS). The vulnerability exists in when parsing the HTTP headers that could allocate substantially more memory than required causing an application crash.
References
github.com/traefik/traefik/commit/4ed3964b3586565519249bbdc55eb1b961c08c49
github.com/traefik/traefik/releases/tag/v2.10.0-rc2
github.com/traefik/traefik/releases/tag/v2.9.10
github.com/traefik/traefik/security/advisories/GHSA-7hj9-rv74-5g92
secdb.alpinelinux.org/edge/community.yaml
security.netapp.com/advisory/ntap-20230517-0008/
Related
osv
osv
CVE-2023-29013
2023-04-14 19:15:09
Traefik HTTP header parsing could cause a denial of service
2023-04-11 20:59:22
alpinelinux
alpinelinux
CVE-2023-29013
2023-04-14 19:15:09
nvd
nvd
CVE-2023-29013
2023-04-14 19:15:09
cvelist
cvelist
CVE-2023-29013 HTTP header parsing could cause a deny of service
2023-04-14 18:15:12
cve
cve
CVE-2023-29013
2023-04-14 19:15:09
prion
prion
Design/Logic Flaw
2023-04-14 19:15:00
github
github
Traefik HTTP header parsing could cause a denial of service
2023-04-11 20:59:22
freebsd
freebsd
traefik -- Use of vulnerable Go modules net/http, net/textproto
2023-03-10 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0387
2023-05-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0575
2023-05-05 00:00:00
ibm
ibm