{"id":"GO-2024-2880","aliases":["GHSA-f7cq-5v43-8pwp"],"title":"Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik","summary":"Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik","severity":"none","vendor":"traefik","product":"github.com/traefik/traefik","ecosystem":"go","affected":["github.com/traefik/traefik","github.com/traefik/traefik/v2 < 2.11.3","github.com/traefik/traefik/v3 < 3.0.1"],"patched":["github.com/traefik/traefik/v2 2.11.3","github.com/traefik/traefik/v3 3.0.1"],"published":"2024-06-05","updated":"2026-08-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GO-2024-2880","references":[{"url":"https://github.com/traefik/traefik/security/advisories/GHSA-f7cq-5v43-8pwp"},{"url":"https://github.com/advisories/GHSA-5fq7-4mxc-535h"},{"url":"https://github.com/traefik/traefik/releases/tag/v2.11.3"},{"url":"https://github.com/traefik/traefik/releases/tag/v3.0.1"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24788"}],"tags":["osv","go"],"ingestedAt":"2026-08-07T19:14:18.747Z","slug":"GO-2024-2880","body":"## Overview\n\nTraefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik\n\n## Affected packages\n\n- `github.com/traefik/traefik`\n- `github.com/traefik/traefik/v2 < 2.11.3`\n- `github.com/traefik/traefik/v3 < 3.0.1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `github.com/traefik/traefik/v2 2.11.3`\n- `github.com/traefik/traefik/v3 3.0.1`","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}