Skip to content
Threat Feed
Subscribe

Product

Traefik (>= 3.7.0, < 3.7.10)

1 brief RSS
low advisory

Service Exhaustion via Stalled TLS ALPN Handshakes

Attackers are exploiting unpatched TLS listeners by flooding them with incomplete ACME ALPN handshakes to exhaust server-side resources like goroutines and worker threads.

PoC Traefik +7
1t 2c 2i updated