PT-2024-6377 · Traefik+9 · Traefik+9

Long-Name-Let-People-Remember-You + 1 · Published 2024-05-07 · Updated 2025-12-15 · CVE-2024-24788

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Traefik (affected versions not specified)

Description A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. The issue is related to the net component of the Go programming language, which can lead to a denial of service when exploited by a remote attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Infinite Loop

Weakness Enumeration

CWE-835

CWE-1395

Related Identifiers

ALSA-2024:5291

ALSA-2024:6969

ALSA-2024:9089

ALSA-2024:9098

ALSA-2024:9115

ALSA-2024:9135

ALSA-2024:9200

ALSA-2024:9277

ALSA-2025:7256

ALT-PU-2024-11781

ALT-PU-2024-11872

ALT-PU-2024-13971

ALT-PU-2024-7548

ALT-PU-2024-7550

ALT-PU-2024-7585

AZL-40375

AZL-40436

AZL-40471

AZL-40480

AZL-40517

AZL-79020

BDU:2024-07420

BIT-GOLANG-2024-24788

CESA-2024_5291

CESA-2024_6969

CVE-2024-24788

GHSA-F7CQ-5V43-8PWP

GO-2024-2824

GO-2024-2880

INFBA-2024_3840

INFSA-2024_5291

INFSA-2024_6969

INFSA-2024_9089

INFSA-2024_9098

INFSA-2024_9115

INFSA-2024_9135

INFSA-2024_9200

INFSA-2024_9277

INFSA-2025_7256

MGASA-2024-0181

OPENSUSE-SU-2024:13936-1

OPENSUSE-SU-2024:13990-1

OPENSUSE-SU-2024:14000-1

OPENSUSE-SU-2024:14076-1

OPENSUSE-SU-2024_1587-1

RHSA-2024:4616

RHSA-2024:5291

RHSA-2024:6765

RHSA-2024:6969

RHSA-2024:9089

RHSA-2024:9098

RHSA-2024:9115

RHSA-2024:9135

RHSA-2024:9200

RHSA-2024:9277

RHSA-2024_5291

RHSA-2024_6969

RHSA-2024_9089

RHSA-2024_9098

RHSA-2024_9115

RHSA-2024_9135

RHSA-2024_9200

RHSA-2024_9277

RHSA-2025:7256

RHSA-2025_7256

RLSA-2024:9135

RLSA-2024:9200

RLSA-2024:9277

SUSE-SU-2024:1573-1

SUSE-SU-2024:1587-1

SUSE-SU-2024:3772-1

SUSE-SU-2024:3938-1

USN-6886-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Traefik

Ubuntu

References · 189

• https://ubuntu.com/security/CVE-2024-24785 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1573-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:9277 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f7cq-5v43-8pwp · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:5291 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:9277 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0181 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-24788 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-9277.html · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-2880 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3938-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-24788 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13936-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-40375 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-9115.html · Vendor Advisory