Apache Traffic Server

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks.

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168.

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206.

Apache Traffic Server: Malformed chunked message body allows request smuggling

Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata

Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smuggling

Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates

The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service (out-of-bounds access and daemon crash) or possibly execute arbitrary code via vectors related to the (1) frame_handlers array or (2) set_dynamic_table_size function.

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT.

There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and scheme parsing. Upgrade to versions 7.1.9 and 8.0.6 or later versions.

There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and chunked encoding. Upgrade to versions 7.1.9 and 8.0.6 or later versions.

There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and Transfer-Encoding and Content length headers. Upgrade to versions 7.1.9 and 8.0.6 or later versions.

Dynamic stack buffer overflow in cachekey plugin

heap-buffer-overflow with stats-over-http plugin

Apache Traffic Server: regex_remap plugin overflows the stack from attacker input

Apache Traffic Server: Use-after-free in the intercept plugin

Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

Apache Traffic Server: Header-name length truncation enables header aliasing and request smuggling

Apache Traffic Server: SNI to Host header matching policy is not properly enforced

Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server

Apache Traffic Server: Memory-safety errors in MIME and header parsing

Apache Traffic Server: Server process can fail to drop privilege

Apache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies

Apache Traffic Server: Incomplete check for chunked trailer section allows request smuggling

Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the server

Apache Traffic Server: Improper server-session reuse can expose data across client connections

There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used.

Apache Traffic Server: ts_lua plugin has initialization and resource-handling errors

Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins

Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely

Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free

Apache Traffic Server: header_rewrite plugin cookie handling can corrupt memory

Apache Traffic Server: Invalid Accept-Encoding can force forwarding requests

Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion

Apache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses

Apache Traffic Server: Regex mappings match with malicious domain names

Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery

Apache Traffic Server: txn_box plugin overflows the stack from attacker input

Apache Traffic Server: HostDB SRV handling leaks memory