Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    1 vulnerability by Calico

    CVE-2023-41378 (GCVE-0-2023-41378)

    Vulnerability from cvelistv5 – Published: 2023-11-06 15:00 – Updated: 2024-09-05 13:40
    VLAI
    Title
    Calico Typha hangs during unclean TLS handshake
    Summary
    In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake() call is performed inside the main server handle for loop without any timeout allowing an unclean TLS handshake to block the main loop indefinitely while other connections will be idle waiting for that handshake to finish.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-400 - Uncontrolled Resource Consumption
    • CWE-703 - Improper Check or Handling of Exceptional Conditions
    Assigner
    References
    Impacted products
    Vendor Product Version
    Calico Typha Affected: v3.26.0 , ≤ v3.26.2 (semver)
    Affected: 0 , ≤ v3.25.1 (semver)
    		Create a notification for this product.
    Tigera Typha Affected: v3.17.0 , ≤ v3.17.1 (semver)
    Affected: v3.16.0 , ≤ v3.16.3 (semver)
    Affected: 0 , ≤ v3.15.3 (semver)
    		Create a notification for this product.
    calico typha Affected: v3.26.0 , ≤ v3.26.2 (semver)
    Affected: 0 , ≤ v3.25.1 (semver)
        cpe:2.3:a:calico:typha:*:*:*:*:*:*:*:*
    		 Create a notification for this product.
    tigera calico Affected: v3.17.0 , ≤ v3.17.1 (semver)
    Affected: v3.16.0 , ≤ v3.16.3 (semver)
    Affected: 0 , ≤ v3.15.3 (semver)
        cpe:2.3:a:tigera:calico:*:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2023-11-06 15:00
    Credits
    Rodrigo Fior Kuntzer (Github: rodrigorfk) Anthony Tam Behnam Shobiri Shaun Crampton Matt Dupre
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:01:35.258Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "release-notes",
              "x_transferred"
            ],
            "url": "https://www.tigera.io/security-bulletins-tta-2023-001/"
          },
          {
            "tags": [
              "issue-tracking",
              "x_transferred"
            ],
            "url": "https://github.com/projectcalico/calico/pull/7908"
          },
          {
            "tags": [
              "patch",
              "x_transferred"
            ],
            "url": "https://github.com/projectcalico/calico/pull/7993"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:calico:typha:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "typha",
            "vendor": "calico",
            "versions": [
              {
                "lessThanOrEqual": "v3.26.2",
                "status": "affected",
                "version": "v3.26.0",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "v3.25.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:tigera:calico:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "calico",
            "vendor": "tigera",
            "versions": [
              {
                "lessThanOrEqual": "v3.17.1",
                "status": "affected",
                "version": "v3.17.0",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "v3.16.3",
                "status": "affected",
                "version": "v3.16.0",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "v3.15.3",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-41378",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-05T13:31:52.190285Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-05T13:40:37.794Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Typha",
          "vendor": "Calico",
          "versions": [
            {
              "lessThanOrEqual": "v3.26.2",
              "status": "affected",
              "version": "v3.26.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "v3.25.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Typha",
          "vendor": "Tigera",
          "versions": [
            {
              "lessThanOrEqual": "v3.17.1",
              "status": "affected",
              "version": "v3.17.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "v3.16.3",
              "status": "affected",
              "version": "v3.16.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "v3.15.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Rodrigo Fior Kuntzer (Github: rodrigorfk)"
        },
        {
          "lang": "en",
          "type": "remediation verifier",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Anthony Tam"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Behnam Shobiri"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Shaun Crampton"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Matt Dupre"
        }
      ],
      "datePublic": "2023-11-06T15:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: transparent;\"\u003eIn certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake() call is performed inside the main server handle for loop without any timeout allowing an unclean TLS handshake to block the main loop indefinitely while other connections will be idle waiting for that handshake to finish.\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake() call is performed inside the main server handle for loop without any timeout allowing an unclean TLS handshake to block the main loop indefinitely while other connections will be idle waiting for that handshake to finish.\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-703",
              "description": "CWE-703 Improper Check or Handling of Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-06T15:00:53.249Z",
        "orgId": "e6d453f4-3dae-4941-bcea-9af25f4e824d",
        "shortName": "Tigera"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "release-notes"
          ],
          "url": "https://www.tigera.io/security-bulletins-tta-2023-001/"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/projectcalico/calico/pull/7908"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/projectcalico/calico/pull/7993"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Calico Typha hangs during unclean TLS handshake",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e6d453f4-3dae-4941-bcea-9af25f4e824d",
    "assignerShortName": "Tigera",
    "cveId": "CVE-2023-41378",
    "datePublished": "2023-11-06T15:00:53.249Z",
    "dateReserved": "2023-08-29T17:03:16.306Z",
    "dateUpdated": "2024-09-05T13:40:37.794Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}