160 matches found
Fedora: Security Advisory for trafficserver (FEDORA-2022-62b61a8542)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
trafficserver:FuzzEsi: Null-dereference READ in EsiParser::_processIncludeTag
Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=5979420909502464 Project: trafficserver Fuzzing Engine: honggfuzz Fuzz Target: FuzzEsi Job Type: honggfuzzasantrafficserver Platform Id: linux Crash Type: Null-dereference READ Crash Address:...
trafficserver:FuzzEsi: Null-dereference READ with empty stacktrace
Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=4953201724227584 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: FuzzEsi Job Type: libfuzzermsantrafficserver Platform Id: linux Crash Type: Null-dereference READ Crash Address:...
Fedora: Security Advisory for trafficserver (FEDORA-2022-23043f5a0b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for trafficserver (FEDORA-2022-9832c0c04b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Improper Input Validation
trafficserver is vulnerable to improper input validation. The vulnerability exists in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers...
Improper Input Validation
trafficserver is vulnerable to improper input validation vulnerability. The vulnerability exists in HTTP/2 header parsing of Apache Traffic Server which allows an attacker to smuggle requests...
Cross-site Scripting (XSS)
trafficserver is vulnerable to cross-site scripting attacks. Vulnerability exists due to improper Input validation in handling the transfer-encoding header of apache traffic server allows an attacker to poison the cache...
Improper Input Validation
trafficserver is vulnerable to improper input validation. The vulnerability exist in HTTP/2 frame handling of Apache Traffic Server which allows an attacker to smuggle requests...
Privilege Escalation
trafficserver is vulnerable to privilege escalation. The vulnerability exists due to the improper input validation in the HTTP/2 requests, allowing an attacker to create smuggle or cache poison attacks through the malicious HTTP/2 requests...
Debian: Security Advisory (DSA-5206-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5206-1] trafficserver security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5206-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 12, 2022 https://www.debian.org/security/faq -...
DSA-5206-1 trafficserver - security update
Bulletin has no description...
Debian: Security Advisory (DSA-5153-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-5153-1 : trafficserver - security update
The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5153 advisory. Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in HTTP request smuggling or MITM...
[SECURITY] [DSA 5153-1] trafficserver security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5153-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 30, 2022 https://www.debian.org/security/faq -...
DSA-5153-1 trafficserver - security update
Bulletin has no description...
Man In The Middle (MitM)
trafficserver is vulnerable to man in the middle attack. The vulnerability exists due to Improper Authentication in TLS origin validation of Apache Traffic Server allowing an attacker to create a man in the middle attack...
Man-In-The-Middle Attack (MitM)
trafficserver is vulnerable to man in the middle attacks. The vulnerability exists due to an Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server...