Vulnerabilities > CVE-2022-39271 - Improper Handling of Exceptional Conditions vulnerability in Traefik

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

traefik

CWE-755

NVD

Published: 2022-10-11

Updated: 2023-07-14

Summary

Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer that assists in deploying microservices. There is a potential vulnerability in Traefik managing HTTP/2 connections. A closing HTTP/2 server connection could hang forever because of a subsequent fatal error. This failure mode could be exploited to cause a denial of service. There has been a patch released in versions 2.8.8 and 2.9.0-rc5. There are currently no known workarounds.

Vulnerable Configurations

Part	Description	Count
Application	Traefik Traefik Traefik 1.0 Traefik Traefik 1.0.0 Traefik Traefik 1.0.1 Traefik Traefik 1.0.2 Traefik Traefik 1.0.3 Traefik Traefik 1.1.0 Traefik Traefik 1.1.1 Traefik Traefik 1.1.2 Traefik Traefik 1.2.0 Traefik Traefik 1.2.1 Traefik Traefik 1.2.2 Traefik Traefik 1.2.3 Traefik Traefik 1.3.0 Traefik Traefik 1.3.1 Traefik Traefik 1.3.2 Traefik Traefik 1.3.3 Traefik Traefik 1.3.4 Traefik Traefik 1.3.5 Traefik Traefik 1.3.6 Traefik Traefik 1.3.7 Traefik Traefik 1.3.8 Traefik Traefik 1.4.0 Traefik Traefik 1.4.1 Traefik Traefik 1.4.2 Traefik Traefik 1.4.3 Traefik Traefik 1.4.4 Traefik Traefik 1.4.5 Traefik Traefik 1.4.6 Traefik Traefik 1.5.0 Traefik Traefik 1.5.1 Traefik Traefik 1.5.2 Traefik Traefik 1.5.3 Traefik Traefik 1.5.4 Traefik Traefik 1.6.0 Traefik Traefik 1.6.1 Traefik Traefik 1.6.2 Traefik Traefik 1.6.3 Traefik Traefik 1.6.4 Traefik Traefik 1.6.5 Traefik Traefik 1.6.6 Traefik Traefik 1.7.0 Traefik Traefik 1.7.1 Traefik Traefik 1.7.2 Traefik Traefik 1.7.3 Traefik Traefik 1.7.4 Traefik Traefik 1.7.5 Traefik Traefik 1.7.6 Traefik Traefik 1.7.7 Traefik Traefik 1.7.8 Traefik Traefik 1.7.9 Traefik Traefik 1.7.10 Traefik Traefik 1.7.11 Traefik Traefik 1.7.12 Traefik Traefik 1.7.13 Traefik Traefik 1.7.14 Traefik Traefik 1.7.15 Traefik Traefik 1.7.16 Traefik Traefik 1.7.17 Traefik Traefik 1.7.18 Traefik Traefik 1.7.19 Traefik Traefik 1.7.20 Traefik Traefik 1.7.21 Traefik Traefik 1.7.22 Traefik Traefik 1.7.23 Traefik Traefik 1.7.24 Traefik Traefik 1.7.25 Traefik Traefik 1.7.26 Traefik Traefik 1.7.27 Traefik Traefik 1.7.28 Traefik Traefik 1.7.29 Traefik Traefik 1.7.30 Traefik Traefik 1.7.31 Traefik Traefik 1.7.32 Traefik Traefik 1.7.33 Traefik Traefik 1.7.34 Traefik Traefik 2.0.0 Traefik Traefik 2.0.1 Traefik Traefik 2.0.2 Traefik Traefik 2.0.3 Traefik Traefik 2.0.4 Traefik Traefik 2.0.5 Traefik Traefik 2.0.6 Traefik Traefik 2.0.7 Traefik Traefik 2.1.0 Traefik Traefik 2.1.1 Traefik Traefik 2.1.2 Traefik Traefik 2.1.3 Traefik Traefik 2.1.4 Traefik Traefik 2.1.5 Traefik Traefik 2.1.6 Traefik Traefik 2.1.7 Traefik Traefik 2.1.8 Traefik Traefik 2.1.9 Traefik Traefik 2.2.0 Traefik Traefik 2.2.1 Traefik Traefik 2.2.2 Traefik Traefik 2.2.3 Traefik Traefik 2.2.4 Traefik Traefik 2.2.5 Traefik Traefik 2.2.6 Traefik Traefik 2.2.7 Traefik Traefik 2.2.8 Traefik Traefik 2.2.10 Traefik Traefik 2.2.11 Traefik Traefik 2.3.0 Traefik Traefik 2.3.1 Traefik Traefik 2.3.2 Traefik Traefik 2.3.3 Traefik Traefik 2.3.4 Traefik Traefik 2.3.5 Traefik Traefik 2.3.6 Traefik Traefik 2.3.7 Traefik Traefik 2.4.0 Traefik Traefik 2.4.1 Traefik Traefik 2.4.2 Traefik Traefik 2.4.3 Traefik Traefik 2.4.4 Traefik Traefik 2.4.5 Traefik Traefik 2.4.6 Traefik Traefik 2.4.7 Traefik Traefik 2.4.8 Traefik Traefik 2.4.9 Traefik Traefik 2.4.10 Traefik Traefik 2.4.11 Traefik Traefik 2.4.12 Traefik Traefik 2.4.13 Traefik Traefik 2.4.14 Traefik Traefik 2.5.0 Traefik Traefik 2.5.1 Traefik Traefik 2.5.2 Traefik Traefik 2.5.3 Traefik Traefik 2.5.4 Traefik Traefik 2.5.5 Traefik Traefik 2.5.6 Traefik Traefik 2.5.7 Traefik Traefik 2.6.0 Traefik Traefik 2.6.1 Traefik Traefik 2.6.2 Traefik Traefik 2.6.3 Traefik Traefik 2.6.4 Traefik Traefik 2.6.5 Traefik Traefik 2.6.6 Traefik Traefik 2.6.7 Traefik Traefik 2.7.0 Traefik Traefik 2.7.1 Traefik Traefik 2.7.2 Traefik Traefik 2.7.3 Traefik Traefik 2.8.0 Traefik Traefik 2.8.1 Traefik Traefik 2.8.2 Traefik Traefik 2.8.3 Traefik Traefik 2.8.4 Traefik Traefik 2.8.5 Traefik Traefik 2.8.6 Traefik Traefik 2.8.7 Traefik Traefik 2.9.0	369

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References