CVE-2023-54365

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-54365
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54365.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-54365
Aliases
Downstream
Related
Published
2026-06-23T12:12:51.853Z
Modified
2026-08-12T03:51:15.219985240Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Traefik - Denial of Service via HTTP/2 Request Handling
Details

Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard library's HTTP/2 implementation (CVE-2023-44487 / CVE-2023-39325, the 'Rapid Reset' technique). A remote attacker can rapidly create and cancel HTTP/2 streams to exhaust server resources and cause service unavailability.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-400"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54365.json"
}
References

Affected packages

Git / github.com/golang/go

Affected ranges

Type
GIT
Repo
https://github.com/golang/go
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
8042fd87f37a725e34407994c9a11aaf95f5af45
Introduced
c19c4c566c63818dfd059b352e52c4710eecf14d
Fixed
883f062fc0a097bf561030ad453fd3e300896975
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.20.10"
        },
        {
            "introduced": "1.21.0"
        },
        {
            "fixed": "1.21.3"
        }
    ],
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"
}
Type
GIT
Repo
https://github.com/traefik/traefik
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
6a34f238ceb13cb0a81d5d131fdfe1ff2e425f33
Introduced
519ed8bde58e9ebc6d9618a38a351208820cf273
Last affected
52d2d959afdfe86884d691314a301a387532671c
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.10.5"
        },
        {
            "introduced": "3.0.0-beta1"
        },
        {
            "last_affected": "3.0.0-beta1"
        },
        {
            "introduced": "3.0.0-beta2"
        },
        {
            "last_affected": "3.0.0-beta2"
        },
        {
            "introduced": "3.0.0-beta3"
        },
        {
            "last_affected": "3.0.0-beta3"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:traefik:traefik:3.0.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:traefik:traefik:3.0.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:traefik:traefik:3.0.0:beta3:*:*:*:*:*:*"
    ]
}

Affected versions

3.*
3.0.0-beta1
3.0.0-beta2
3.0.0-beta3
go1.*
go1.10beta1
go1.10beta2
go1.10rc1
go1.10rc2
go1.11beta1
go1.11beta2
go1.11beta3
go1.12beta1
go1.12beta2
go1.13beta1
go1.14beta1
go1.15beta1
go1.16beta1
go1.17beta1
go1.18beta1
go1.18beta2
go1.19beta1
go1.20
go1.20.1
go1.20.2
go1.20.3
go1.20.4
go1.20.5
go1.20.6
go1.20.7
go1.20.8
go1.20.9
go1.20rc1
go1.20rc2
go1.20rc3
go1.21.0
go1.21.1
go1.21.2
go1.3beta1
go1.3beta2
go1.4beta1
go1.5beta1
go1.5beta2
go1.5beta3
go1.6beta1
go1.6beta2
go1.7beta1
go1.7beta2
go1.7rc1
go1.7rc2
go1.7rc3
go1.7rc4
go1.8beta1
go1.8beta2
go1.9beta1
go1.9beta2
release.*
release.r56
v1.*
v1.0
v1.0.0
v1.0.0-beta.211
v1.0.0-beta.212
v1.0.0-beta.220
v1.0.0-beta.224
v1.0.0-beta.247
v1.0.0-beta.254
v1.0.0-beta.277
v1.0.0-beta.280
v1.0.0-beta.287
v1.0.0-beta.289
v1.0.0-beta.291
v1.0.0-beta.300
v1.0.0-beta.324
v1.0.0-beta.339
v1.0.0-beta.341
v1.0.0-beta.352
v1.0.0-beta.355
v1.0.0-beta.366
v1.0.0-beta.374
v1.0.0-beta.392
v1.0.0-beta.395
v1.0.0-beta.404
v1.0.0-beta.408
v1.0.0-beta.416
v1.0.0-beta.421
v1.0.0-beta.427
v1.0.0-beta.433
v1.0.0-beta.436
v1.0.0-beta.440
v1.0.0-beta.442
v1.0.0-beta.453
v1.0.0-beta.470
v1.0.0-beta.475
v1.0.0-beta.481
v1.0.0-beta.484
v1.0.0-beta.505
v1.0.0-beta.508
v1.0.0-beta.513
v1.0.0-beta.524
v1.0.0-beta.545
v1.0.0-beta.548
v1.0.0-beta.555
v1.0.0-beta.573
v1.0.0-beta.576
v1.0.0-beta.582
v1.0.0-beta.601
v1.0.0-beta.610
v1.0.0-beta.614
v1.0.0-beta.621
v1.0.0-beta.644
v1.0.0-beta.652
v1.0.0-beta.666
v1.0.0-beta.673
v1.0.0-beta.676
v1.0.0-beta.682
v1.0.0-beta.692
v1.0.0-beta.695
v1.0.0-beta.704
v1.0.0-beta.712
v1.0.0-beta.721
v1.0.0-beta.723
v1.0.0-beta.732
v1.0.0-beta.744
v1.0.0-beta.754
v1.0.0-beta.756
v1.0.0-beta.767
v1.0.0-beta.771
v1.0.0-beta.784
v1.0.0-beta.794
v1.0.0-beta.804
v1.0.0-beta.809
v1.0.0-rc1
v1.0.0-rc2
v1.0.0-rc3
v1.0.alpha.0e683cc5355bc507dabac68bbc7559d3f179e185
v1.0.alpha.11781087cadf9068d1d0b43902b6161ee10ea458
v1.0.alpha.157
v1.0.alpha.164
v1.0.alpha.170
v1.0.alpha.171
v1.0.alpha.176
v1.0.alpha.178
v1.0.alpha.182
v1.0.alpha.186
v1.0.alpha.1a5668377cc840a35d233a0eb817ee9bacf0ba3e
v1.0.alpha.200
v1.0.alpha.212
v1.0.alpha.215
v1.0.alpha.216
v1.0.alpha.217
v1.0.alpha.228
v1.0.alpha.247
v1.0.alpha.249
v1.0.alpha.250
v1.0.alpha.251
v1.0.alpha.252
v1.0.alpha.256
v1.0.alpha.257
v1.0.alpha.263
v1.0.alpha.266
v1.0.alpha.267
v1.0.alpha.268
v1.0.alpha.269
v1.0.alpha.270
v1.0.alpha.271
v1.0.alpha.272
v1.0.alpha.273
v1.0.alpha.274
v1.0.alpha.275
v1.0.alpha.285
v1.0.alpha.288
v1.0.alpha.290
v1.0.alpha.291
v1.0.alpha.302
v1.0.alpha.306
v1.0.alpha.311
v1.0.alpha.329
v1.0.alpha.331cd173ce8ad858d767510fbcbc653e2dde657d
v1.0.alpha.333
v1.0.alpha.336
v1.0.alpha.338
v1.0.alpha.341
v1.0.alpha.357
v1.0.alpha.358
v1.0.alpha.361
v1.0.alpha.364
v1.0.alpha.367
v1.0.alpha.374
v1.0.alpha.392
v1.0.alpha.3af21612b65fc578585a98c30090d1e613f791eb
v1.0.alpha.404
v1.0.alpha.412
v1.0.alpha.418
v1.0.alpha.421
v1.0.alpha.425
v1.0.alpha.439
v1.0.alpha.443
v1.0.alpha.450
v1.0.alpha.463
v1.0.alpha.469
v1.0.alpha.471
v1.0.alpha.477
v1.0.alpha.481
v1.0.alpha.4c447985b63f8c90dcbde70b2eaef19d9a8c5ad2
v1.0.alpha.4ded2682d2831ed703282b2f4585e17a62ee258e
v1.0.alpha.506
v1.0.alpha.516
v1.0.alpha.522
v1.0.alpha.60e9282f0adac48cbf283306ceb08ad7a31ac94b
v1.0.alpha.6c3c5578c64125838abbc437a0242e1742d6f47a
v1.0.alpha.71b0e27517841ec7b911bafb109846ee96109f30
v1.0.alpha.7acc2beae0f0235d9408e8ed7a51f0ef3dae3aff
v1.0.alpha.9830086790caf40ce30eb9ed5d317917f8157708
v1.0.alpha.99646544953d5793f18ccb22dae2458be4ba0e05
v1.0.alpha.a00eb81f0301f5e61024dea3b92ba632d6a61a8b
v1.0.alpha.a458018aa2ccb637abacfc696157e00321cf982f
v1.0.alpha.ac56c1310c46f9c18dcad9d7ec680926fae821bb
v1.0.alpha.b42b170ad29a0f042ddee0f5a5098aa9a59a9c8e
v1.0.alpha.b84b95fe97df5c0f234d8693fbff03fa0d6a441b
v1.0.alpha.e0872b61579c8e6b8fc6124c8836660c11840f5d
v1.1.0-rc1
v1.3.0-rc1
v1.4.0-rc1
v1.5.0-rc1
v1.6.0-rc1
v1.7.0-rc1
v2.*
v2.0.0-alpha1
v2.1.0-rc1
v2.1.0-rc2
v2.10.0
v2.10.0-rc1
v2.10.0-rc2
v2.10.1
v2.10.2
v2.10.3
v2.10.4
v2.2.0-rc1
v2.2.0-rc2
v2.2.0-rc3
v2.2.0-rc4
v2.3.0-rc1
v2.4.0
v2.4.0-rc1
v2.4.0-rc2
v2.4.1
v2.4.2
v2.4.3
v2.4.4
v2.4.5
v2.4.6
v2.4.7
v2.4.8
v2.5.0-rc1
v2.6.0-rc1
v2.7.0
v2.7.0-rc1
v2.7.0-rc2
v2.8.0-rc1
v2.9.0-rc1
v2.9.0-rc2
v2.9.0-rc3
v2.9.0-rc4
v2.9.0-rc5
v2.9.1
v2.9.2
v2.9.3
v2.9.4
v2.9.5
v2.9.6
v2.9.7
v2.9.8
v3.*
v3.0.0-beta1
v3.0.0-beta2
v3.0.0-beta3
Other
weekly
weekly.*
weekly.2009-11-06
weekly.2009-11-10
weekly.2009-11-10.1
weekly.2009-11-12
weekly.2009-11-17
weekly.2009-12-07
weekly.2009-12-09
weekly.2009-12-22
weekly.2010-01-05
weekly.2010-01-13
weekly.2010-01-27
weekly.2010-02-04
weekly.2010-02-17
weekly.2010-02-23
weekly.2010-03-04
weekly.2010-03-15
weekly.2010-03-22
weekly.2010-03-30
weekly.2010-04-13
weekly.2010-04-27
weekly.2010-05-04
weekly.2010-05-27
weekly.2010-06-09
weekly.2010-06-21
weekly.2010-07-01
weekly.2010-07-14
weekly.2010-07-29
weekly.2010-08-04
weekly.2010-08-11
weekly.2010-08-25
weekly.2010-09-06
weekly.2010-09-15
weekly.2010-09-22
weekly.2010-09-29
weekly.2010-10-13
weekly.2010-10-13.1
weekly.2010-10-20
weekly.2010-10-27
weekly.2010-11-02
weekly.2010-11-10
weekly.2010-11-23
weekly.2010-12-02
weekly.2010-12-08
weekly.2010-12-15
weekly.2010-12-15.1
weekly.2010-12-22
weekly.2011-01-06
weekly.2011-01-12
weekly.2011-01-19
weekly.2011-01-20
weekly.2011-02-01
weekly.2011-02-01.1
weekly.2011-02-15
weekly.2011-02-24
weekly.2011-03-07
weekly.2011-03-07.1
weekly.2011-03-15
weekly.2011-03-28
weekly.2011-04-04
weekly.2011-04-13
weekly.2011-04-27
weekly.2011-05-22
weekly.2011-06-02
weekly.2011-06-09
weekly.2011-06-16
weekly.2011-06-23
weekly.2011-07-07
weekly.2011-07-19
weekly.2011-07-29
weekly.2011-08-10
weekly.2011-08-17
weekly.2011-09-01
weekly.2011-09-07
weekly.2011-09-16
weekly.2011-09-21
weekly.2011-10-06
weekly.2011-10-18
weekly.2011-10-25
weekly.2011-10-26
weekly.2011-11-01
weekly.2011-11-02
weekly.2011-11-08
weekly.2011-11-09
weekly.2011-11-18
weekly.2011-12-01
weekly.2011-12-02
weekly.2011-12-06
weekly.2011-12-14
weekly.2011-12-22
weekly.2012-01-15
weekly.2012-01-20
weekly.2012-01-27
weekly.2012-02-07
weekly.2012-02-14
weekly.2012-02-22
weekly.2012-03-04
weekly.2012-03-13
weekly.2012-03-22
weekly.2012-03-27

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54365.json"