CVEvulnerability

CVE-2023-41378

7.5 HIGH Published 2023-11-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400, CWE-703, CWE-755

Description

In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake() call is performed inside the main server handle for loop without any timeout allowing an unclean TLS handshake to block the main loop indefinitely while other connections will be idle waiting for that handshake to finish.

Affected configurations

• tigera calico cloud (< 18.0.0) • tigera calico enterprise (< 3.15.4) • tigera calico enterprise (>= 3.16.0 < 3.16.4) • tigera calico enterprise (>= 3.17.0 < 3.17.2) • tigera calico os (< 3.25.2) • tigera calico os (>= 3.26.0 < 3.26.3)

Related

Weakness · CWE (3)

  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-703 Improper Check or Handling of Exceptional Conditions weakness
  • CWE-755 Improper Handling of Exceptional Conditions weakness

References