CVE-2024-40632
1 advisory.
Go/github.com/linkerd/linkerd2 CVE-2024-40632: unknown
Linkerd potential access to the shutdown endpoint in github.com/linkerd/linkerd2
Action: Upgrade github.com/linkerd/linkerd2 to 0.5.1-0.20240614165515-35fb2d6d11ef or later.
go get github.com/linkerd/linkerd2@v0.5.1-0.20240614165515-35fb2d6d11efAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.1-0.20240614165515-35fb2d6d11ef | - |
Fixed versions
| 0.5.1-0.20240614165515-35fb2d6d11ef |
Sources
- osv: GO-2024-2984
- https://nvd.nist.gov/vuln/detail/CVE-2024-40632
- https://github.com/linkerd/linkerd2/commit/35fb2d6d11ef6520ae516dd717790529f85224fa
- https://github.com/linkerd/linkerd2-proxy/blob/46957de49f25fd4661af7b7c52659148f4d6dd27/linkerd/app/admin/src/server.rs
- https://github.com/linkerd/linkerd2/security/advisories/GHSA-6v94-gj6x-jqj7
CVE-2024-40632 · published · modified · JSON