UpHeron
All vulnerabilities

Servers and applications

CVE-2023-47633

Uses 100% CPU after request to with host `traefik-service`

Severity
High 7.5
Published
4 Dec 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.10.6, 3.0.0-beta5
Also known as
GHSA-6fwg-jrfw-ff7p
Sources
NVD, Project advisories (GitHub)

Description

Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. This issue has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this…

Affected software

SoftwareAffected versions
TraefikServers and applications · cpe:a:traefik:traefik
  • Every version up to 2.10.5
  • Version 3.0.0-beta1
  • Version 3.0.0-beta2
  • Version 3.0.0-beta3
  • Version 3.0.0-beta4
TraefikServers and applications · github:traefik/traefik
  • Every version before 2.10.6
  • Every version before 3.0.0-beta5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-47633
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-47633
  • GitHub Advisory Database https://github.com/advisories/GHSA-6fwg-jrfw-ff7p
  • github.com https://github.com/traefik/traefik/security/advisories/GHSA-6fwg-jrfw-ff7p