x/vulndb: potential Go vuln in github.com/traefik/traefik: GHSA-f7cq-5v43-8pwp

[GoVulnBot]

In GitHub Security Advisory GHSA-f7cq-5v43-8pwp, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/traefik/traefik		<= 1.7.34

Cross references:

• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: CVE-2022-23632 #325 EFFECTIVELY_PRIVATE
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: GHSA-7h6j-2268-fhcm #808 NOT_IMPORTABLE
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: CVE-2021-32813, GHSA-m697-4v8f-55qg #923 NOT_IMPORTABLE
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: GHSA-7v4p-328v-8v5g #2117 DEPENDENT_VULNERABILITY
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: CVE-2023-47106 #2376 EFFECTIVELY_PRIVATE
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: CVE-2023-47633 #2377 EFFECTIVELY_PRIVATE

See doc/triage.md for instructions on how to triage this report.

id: GO-ID-PENDING
modules:
    - module: github.com/traefik/traefik
      non_go_versions:
        - {}
      vulnerable_at: 1.7.34
      packages:
        - package: github.com/traefik/traefik
    - module: github.com/traefik/traefik
      non_go_versions:
        - fixed: 2.11.3
      vulnerable_at: 1.7.34
      packages:
        - package: github.com/traefik/traefik/v2
    - module: github.com/traefik/traefik
      non_go_versions:
        - fixed: 3.0.1
      vulnerable_at: 1.7.34
      packages:
        - package: github.com/traefik/traefik/v3
summary: |-
    Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite
    loop in github.com/traefik/traefik
ghsas:
    - GHSA-f7cq-5v43-8pwp
references:
    - advisory: https://github.com/advisories/GHSA-f7cq-5v43-8pwp
    - advisory: https://github.com/traefik/traefik/security/advisories/GHSA-f7cq-5v43-8pwp
    - web: https://github.com/advisories/GHSA-5fq7-4mxc-535h
    - web: https://github.com/traefik/traefik/releases/tag/v2.11.3
    - web: https://github.com/traefik/traefik/releases/tag/v3.0.1
    - web: https://www.cve.org/CVERecord?id=CVE-2024-24788
source:
    id: GHSA-f7cq-5v43-8pwp
    created: 2024-05-23T16:01:29.363166498Z
review_status: UNREVIEWED

[gopherbot]

Change https://go.dev/cl/590277 mentions this issue: data/reports: add 26 unreviewed reports