Lucene search
+L

160 matches found

OSS-Fuzz
OSS-Fuzz
•added 2024/03/16 6:57 p.m.•12 views

trafficserver:fuzz_http3frame: Heap-buffer-overflow in QUICVariableInt::size

Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=5203966637965312 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzhttp3frame Job Type: libfuzzerasantrafficserver Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2024/03/12 3:57 p.m.•18 views

trafficserver:fuzz_http3frame: Heap-buffer-overflow in QUICVariableInt::size

Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=4832564147716096 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzhttp3frame Job Type: libfuzzerasantrafficserver Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

5.9AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2023/11/06 12:00 a.m.•38 views

Debian: Security Advisory (DLA-3645-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.8AI score0.99999EPSS
SaveExploits21References6
OpenVAS
OpenVAS
•added 2023/11/06 12:00 a.m.•45 views

Debian: Security Advisory (DSA-5549-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS8.8AI score0.99999EPSS
SaveExploits21References6
Debian
Debian
•added 2023/11/05 9:50 p.m.•79 views

[SECURITY] [DLA 3645-1] trafficserver security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3645-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 05, 2023 https://wiki.debian.org/LTS -...

7.5CVSS9.5AI score0.99999EPSS
SaveExploits21
osv_dla
osv_dla
•added 2023/11/05 12:00 a.m.•52 views

DLA-3645-1 trafficserver - security update

Bulletin has no description...

7.5CVSS8.2AI score0.99999EPSS
SaveExploits21
osv_dsa
osv_dsa
•added 2023/11/05 12:00 a.m.•54 views

DSA-5549-1 trafficserver - security update

Bulletin has no description...

9.1CVSS8.2AI score0.99999EPSS
SaveExploits21
Tenable Nessus
Tenable Nessus
•added 2023/11/05 12:00 a.m.•59 views

Debian DSA-5549-1 : trafficserver - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5549 advisory. Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service or information...

9.1CVSS7.4AI score0.99999EPSS
SaveExploits21References14
OpenVAS
OpenVAS
•added 2023/11/05 12:00 a.m.•43 views

Fedora: Security Advisory (FEDORA-2023-1caffb88af)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.8AI score0.99999EPSS
SaveExploits21References11
Veracode
Veracode
•added 2023/11/04 1:22 p.m.•39 views

Improper Input Validation

trafficserver is vulnerable to Improper Input Validation. The vulnerability occurs in the Apache traffic server with malformed HTTP/2 frames resulting in a Denial of Service...

7.5CVSS7.4AI score0.58286EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2023/11/04 3:05 a.m.•28 views

Information Disclosure

trafficserver is vulnerable to Information Disclosure. The vulnerability allows an unauthorized malicious actor to access sensitive information within the apache traffic server...

7.5CVSS6.5AI score0.01626EPSS
SaveExploits0References7Affected Software2
OpenVAS
OpenVAS
•added 2023/10/22 12:00 a.m.•36 views

Fedora: Security Advisory for trafficserver (FEDORA-2023-54fadada12)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.99999EPSS
SaveExploits21References4
OpenVAS
OpenVAS
•added 2023/10/20 12:00 a.m.•57 views

Fedora: Security Advisory for trafficserver (FEDORA-2023-5ff7bf1dd8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.6AI score0.99999EPSS
SaveExploits21References4
OpenVAS
OpenVAS
•added 2023/10/02 12:00 a.m.•27 views

Debian: Security Advisory (DLA-3595-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.4AI score0.02003EPSS
SaveExploits0References4
Debian
Debian
•added 2023/09/30 6:25 p.m.•82 views

[SECURITY] [DLA 3595-1] trafficserver security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3595-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 30, 2023 https://wiki.debian.org/LTS -...

9.1CVSS8.9AI score0.02003EPSS
SaveExploits0
osv_dla
osv_dla
•added 2023/09/30 12:00 a.m.•32 views

DLA-3595-1 trafficserver - security update

Bulletin has no description...

9.1CVSS8.2AI score0.02003EPSS
SaveExploits0
Veracode
Veracode
•added 2023/09/07 8:45 p.m.•34 views

Improper Input Validation

trafficserver is vulnerable to Improper Input Validation. This vulnerability allows an attacker to cause a denial-of-service DoS attack by sending a specially crafted HTTP request...

7.5CVSS6.7AI score0.02003EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
•added 2023/08/19 12:00 a.m.•51 views

Fedora: Security Advisory for trafficserver (FEDORA-2023-dcbfbf1396)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.4AI score0.02003EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/08/18 12:00 a.m.•33 views

Fedora 38 : trafficserver (2023-dcbfbf1396)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-dcbfbf1396 advisory. Update to upstream 9.2.2. Changes with Apache Traffic Server 9.2.2 9544 - Docs: format typos in headerrewrite doc 9754 - Fix OCSP detection during...

9.1CVSS7.7AI score0.02003EPSS
SaveExploits0References3
Veracode
Veracode
•added 2023/07/01 5:46 a.m.•23 views

Information Disclosure

trafficserver is vulnerable to Information Disclosure. The issue is caused by a 's3auth' plugin allowing a malicious attacker to obtain sensitive information...

7.5CVSS6.5AI score0.01508EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder