Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-41378

Calico Typha hangs during unclean TLS handshake

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Tigera

Description

In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake() call is performed inside the main server handle for loop without any timeout allowing an unclean TLS handshake to block the main loop indefinitely while other connections will be idle waiting for that handshake to finish.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Calico Typha

Default version status: unaffected

  • v3.26.0 to ≤ v3.26.2affected
  • 0 to ≤ v3.25.1affected

Tigera Typha

Default version status: unaffected

  • v3.17.0 to ≤ v3.17.1affected
  • v3.16.0 to ≤ v3.16.3affected
  • 0 to ≤ v3.15.3affected

References