| id: GO-2024-2880 |
| modules: |
| - module: github.com/traefik/traefik |
| unsupported_versions: |
| - last_affected: 1.7.34 |
| vulnerable_at: 1.7.34 |
| - module: github.com/traefik/traefik/v2 |
| versions: |
| - fixed: 2.11.3 |
| vulnerable_at: 2.11.2 |
| - module: github.com/traefik/traefik/v3 |
| versions: |
| - fixed: 3.0.1 |
| vulnerable_at: 3.0.0 |
| summary: |- |
| Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite |
| loop in github.com/traefik/traefik |
| ghsas: |
| - GHSA-f7cq-5v43-8pwp |
| references: |
| - advisory: https://github.com/traefik/traefik/security/advisories/GHSA-f7cq-5v43-8pwp |
| - web: https://github.com/advisories/GHSA-5fq7-4mxc-535h |
| - web: https://github.com/traefik/traefik/releases/tag/v2.11.3 |
| - web: https://github.com/traefik/traefik/releases/tag/v3.0.1 |
| - web: https://www.cve.org/CVERecord?id=CVE-2024-24788 |
| source: |
| id: GHSA-f7cq-5v43-8pwp |
| created: 2024-06-04T14:25:41.535025-04:00 |
| review_status: UNREVIEWED |
