{"schema_version":"1.3.1","id":"GO-2024-2984","modified":"2024-07-22T18:24:29Z","published":"2024-07-22T18:24:29Z","aliases":["CVE-2024-40632"],"summary":"Linkerd potential access to the shutdown endpoint in github.com/linkerd/linkerd2","details":"Linkerd potential access to the shutdown endpoint in github.com/linkerd/linkerd2","affected":[{"package":{"name":"github.com/linkerd/linkerd2","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.5.1-0.20240614165515-35fb2d6d11ef"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/linkerd/linkerd2/pkg/inject","symbols":["applyAnnotationOverrides"]}],"custom_ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"edge-24.6.2"}]}]}}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40632"},{"type":"FIX","url":"https://github.com/linkerd/linkerd2/commit/35fb2d6d11ef6520ae516dd717790529f85224fa"},{"type":"WEB","url":"https://github.com/linkerd/linkerd2-proxy/blob/46957de49f25fd4661af7b7c52659148f4d6dd27/linkerd/app/admin/src/server.rs"},{"type":"WEB","url":"https://github.com/linkerd/linkerd2/security/advisories/GHSA-6v94-gj6x-jqj7"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2024-2984","review_status":"REVIEWED"}}