Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Ekle

#33726de 55,135
7.8CVSS total
Vulnerabilidades · 1
PT-2023-9077
7.8
2023-11-28
Traefik · Traefik · CVE-2023-47633
**Name of the Vulnerable Software and Affected Versions** Traefik versions prior to 2.10.6 Traefik versions prior to 3.0.0-beta5 **Description** The issue is related to the Traefik docker container using 100% CPU when it serves as its own backend, resulting from the Docker integration in the default configuration. This can cause the server to become unresponsive. The problem arises when Traefik is configured to handle traffic for Docker containers and an automatically generated route is created, leading to an endless loop of requests. For example, sending a request with a specific hostname using `curl -v --resolve "traefik-service:80:xxx.xxx.xxx.xxx" http://traefik-service` can make the whole server unresponsive. **Recommendations** For Traefik versions prior to 2.10.6, upgrade to version 2.10.6 or later. For Traefik versions prior to 3.0.0-beta5, upgrade to version 3.0.0-beta5 or later. As a temporary workaround, consider restricting access to the Docker backend to minimize the risk of exploitation. Avoid using the Docker integration in the default configuration until the issue is resolved.