CVE-2023-39456

🗓️ 17 Oct 2023 06:58:17Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 128 Views

Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames. Upgrade to version 9.2.3 to fix

Reporter	Title	Published	Views	Family All 30
AlpineLinux	CVE-2023-39456	17 Oct 202306:58	–	alpinelinux
Circl	CVE-2023-39456	12 Jun 202515:34	–	circl
CNNVD	Apache Traffic Server 输入验证错误漏洞	17 Oct 202300:00	–	cnnvd
CNVD	Apache Traffic Server Input Validation Error Vulnerability (CNVD-2023-93321)	25 Oct 202300:00	–	cnvd
Cvelist	CVE-2023-39456 Apache Traffic Server: Malformed http/2 frames can cause an abort	17 Oct 202306:58	–	cvelist
Debian	[SECURITY] [DSA 5549-1] trafficserver security update	5 Nov 202319:57	–	debian
Debian CVE	CVE-2023-39456	17 Oct 202306:58	–	debiancve
Tenable Nessus	Debian DSA-5549-1 : trafficserver - security update	5 Nov 202300:00	–	nessus
Tenable Nessus	Fedora 39 : trafficserver (2023-1caffb88af)	7 Nov 202300:00	–	nessus
Tenable Nessus	Fedora 37 : trafficserver (2023-54fadada12)	20 Oct 202300:00	–	nessus

NVD

Vulners

Vulnrichment

Node

apache traffic_serverRange9.0.0–9.2.3

Node

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Traffic Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "9.2.2",
        "status": "affected",
        "version": "9.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
debian	www.debian.org/security/2023/dsa-5549
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/

12 Jun 2025 15:15Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.07819

SSVC

CWE-20