High severityNVD Advisory· Published Dec 4, 2023· Updated Nov 27, 2024
Uncontrolled Resource Consumption in Traefik
CVE-2023-47633
Description
Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. This issue has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/traefik/traefik/v2Go | < 2.10.6 | 2.10.6 |
github.com/traefik/traefik/v3Go | < 3.0.0-beta5 | 3.0.0-beta5 |
Affected products
8- osv-coords7 versionspkg:apk/chainguard/traefikpkg:apk/chainguard/traefik-fipspkg:apk/wolfi/traefikpkg:golang/github.com/traefik/traefik/v2pkg:golang/github.com/traefik/traefik/v3pkg:rpm/opensuse/traefik2&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/traefik&distro=openSUSE%20Tumbleweed
< 2.10.6-r0+ 6 more
- (no CPE)range: < 2.10.6-r0
- (no CPE)range: < 0
- (no CPE)range: < 2.10.6-r0
- (no CPE)range: < 2.10.6
- (no CPE)range: < 3.0.0-beta5
- (no CPE)range: < 2.11.5-1.1
- (no CPE)range: < 2.10.7-1.1
Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-6fwg-jrfw-ff7pghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-47633ghsaADVISORY
- github.com/traefik/traefik/releases/tag/v2.10.6ghsax_refsource_MISCWEB
- github.com/traefik/traefik/releases/tag/v3.0.0-beta5ghsax_refsource_MISCWEB
- github.com/traefik/traefik/security/advisories/GHSA-6fwg-jrfw-ff7pghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.