Lucene search
HistoryAug 10, 2022 - 6:15 a.m.
CVE-2022-31778
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.002 Low
EPSS
Percentile
60.0%
Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.2.
Affected configurations
Node
apachetraffic_serverRange8.0.0–8.1.4
ORapachetraffic_serverRange9.0.0–9.1.2
Node
debiandebian_linuxMatch11.0
Related
cnvd
cnvd
Apache Traffic Server Input Validation Error Vulnerability (CNVD-2023-03925)
2022-08-15 00:00:00
ubuntucve
ubuntucve
CVE-2022-31778
2022-08-10 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2022-08-21 02:46:35
openvas
openvas
Apache Traffic Server (ATS) 8.0.0 <= 8.1.4 Improper Input Validation Vulnerability
2022-08-11 00:00:00
Debian: Security Advisory (DLA-3385-1)
2023-04-11 00:00:00
Debian: Security Advisory (DSA-5206-1)
2022-08-14 00:00:00
cvelist
cvelist
CVE-2022-31778 Transfer-Encoding not treated as hop-by-hop
2022-08-10 00:00:00
debiancve
debiancve
CVE-2022-31778
2022-08-10 06:15:08
prion
prion
Input validation
2022-08-10 06:15:00
cve
cve
CVE-2022-31778
2022-08-10 06:15:08
osv
osv
CVE-2022-31778
2022-08-10 06:15:08
trafficserver - security update
2023-04-05 00:00:00
trafficserver - security update
2022-08-12 00:00:00
nessus
nessus
Debian DLA-3385-1 : trafficserver - LTS security update
2023-04-10 00:00:00
Debian DSA-5206-1 : trafficserver - security update
2022-08-13 00:00:00
debian
debian
[SECURITY] [DLA 3385-1] trafficserver security update
2023-04-05 22:00:47
[SECURITY] [DSA 5206-1] trafficserver security update
2022-08-12 15:05:18
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.002 Low
EPSS
Percentile
60.0%
Related for NVD:CVE-2022-31778