Skip to content
OpenAdvisories
High MSRC-CVE-2023-33141 1 CVE

Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability

Published Jun 13, 2023 · Updated Jun 22, 2023 · Revision 3

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Is the update for YARP 2.0 currently available?
The security update for YARP 2.0 is not immediately available. The update will be released as soon as possible, and when it is available, customers will be notified via a revision to this CVE information.

Security updates
1.1.2 — https://github.com/microsoft/reverse-proxy/security/advisories/GHSA-jrjw-qgr2-wfcg

Vulnerabilities 1

Revision history

  1. #3

    The following revisions have been made in the Security Updates table: 1) Added YARP 1.0 as it is also affected by this vulnerability and an update is available. 2) The security update for YARP 2.0 is now available. Customers running these affected versions of YARP should install the update for their product to be protected from this vulnerability.

  2. #2

    FAQ added to explain that the YARP 2.0 is not immediately available. The update will be released as soon as possible, and when it is available, customers will be notified via a revision to this CVE information.

  3. #1

    Information published.

References