Apache

Traffic Server

80 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2021-35474

  • EPSS 9.21%
  • Published 30.06.2021 08:15:06
  • Last modified 21.11.2024 06:12:20

Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

7.5

CVE-2021-32567

  • EPSS 6%
  • Published 30.06.2021 08:15:06
  • Last modified 21.11.2024 06:07:17

Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

7.5

CVE-2021-32566

  • EPSS 6%
  • Published 30.06.2021 08:15:06
  • Last modified 21.11.2024 06:07:16

Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

7.5

CVE-2021-32565

  • EPSS 5.68%
  • Published 29.06.2021 12:15:08
  • Last modified 21.11.2024 06:07:16

Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

7.5

CVE-2021-27577

  • EPSS 0.68%
  • Published 29.06.2021 12:15:08
  • Last modified 21.11.2024 05:58:13

Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

7.5

CVE-2021-27737

  • EPSS 9.47%
  • Published 14.05.2021 21:15:07
  • Last modified 21.11.2024 05:58:29

Apache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin.

7.5

CVE-2020-17509

  • EPSS 3.05%
  • Published 11.01.2021 10:15:13
  • Last modified 21.11.2024 05:08:15

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

7.5

CVE-2020-17508

  • EPSS 2.66%
  • Published 11.01.2021 10:15:13
  • Last modified 21.11.2024 05:08:15

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

7.5

CVE-2020-9494

  • EPSS 1.17%
  • Published 24.06.2020 16:15:11
  • Last modified 21.11.2024 05:40:46

Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADERS frames that can cause the server to allocate a large amount of memory and spin the thread.

7.5

CVE-2020-9481

  • EPSS 5.23%
  • Published 27.04.2020 22:15:12
  • Last modified 21.11.2024 05:40:44

Apache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read attack.