CVE-2017-5660: Improper Input Validation

There is a vulnerability in Apache Traffic Server ATS 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used...

CVE-2017-7671: Improper Input Validation

There is a DOS attack vulnerability in Apache Traffic Server ATS 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the TLS handshake. This issue can cause the server to coredump...

PT-2018-8424

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 5.2.0 through 5.3.2 Apache Traffic Server versions 6.0.0 through 6.2.0 Apache Traffic Server version 7.0.0 Description The issue is related to a DOS attack vulnerability in the TLS handshake, which can cause the...

PT-2018-8257

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server ATS versions 6.2.0 and prior Apache Traffic Server ATS versions 7.0.0 and prior Description: The issue arises from the handling of the Host header and line folding, potentially causing problems when interacting with...

The vulnerability of the experimental implementation of the HTTP/2 protocol in the Apache Traffic Server allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the experimental implementation of the HTTP/2 protocol in the Apache Traffic Server web server arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failur...

Apache Traffic Server (ATS) 5.3.x < 5.3.1 DoS Vulnerability

Apache Traffic Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache Traffic Server (ATS) 5.1.x < 5.1.1 Access Bypass Vulnerability

Apache Traffic Server is prone to an access bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache Traffic Server Remote Code Execution Vulnerability

Apache Traffic Server is the United States Apache Apache Software Foundation of an efficient , scalable HTTP proxy and caching server . A security vulnerability exists in the HTTP/2 experimental feature of Apache Traffic Server versions 5.3.x prior to 5.3.1. A remote attacker can exploit this...

Apache Traffic Server Access Bypass Vulnerability

Apache Traffic Server is the United States Apache Apache Software Foundation of an efficient , scalable HTTP proxy and caching server . A security vulnerability exists in Apache Traffic Server version 5.1.x prior to 5.1.1. A remote attacker could exploit this vulnerability to bypass access...

CVE-2014-3624

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT...

CVE-2015-3249

The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service out-of-bounds access and daemon crash or possibly execute arbitrary code via vectors related to the 1 framehandlers array or 2 setdynamictablesize function...

CVE-2014-3624

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT...

CVE-2015-3249

The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service out-of-bounds access and daemon crash or possibly execute arbitrary code via vectors related to the 1 framehandlers array or 2 setdynamictablesize function...

CVE-2014-3624

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT...

DEBIAN-CVE-2015-3249

The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service out-of-bounds access and daemon crash or possibly execute arbitrary code via vectors related to the 1 framehandlers array or 2 setdynamictablesize function...

CVE-2015-3249

The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service out-of-bounds access and daemon crash or possibly execute arbitrary code via vectors related to the 1 framehandlers array or 2 setdynamictablesize function...

DEBIAN-CVE-2014-3624

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT...

Out-of-bounds

The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service out-of-bounds access and daemon crash or possibly execute arbitrary code via vectors related to the 1 framehandlers array or 2 setdynamictablesize function...

CVE-2014-3624

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT...

CVE-2014-3624

CVE-2014-3624 affects Apache Traffic Server (ATS) 5.1.x before 5.1.1 . The issue is a failure to properly tunnel remap requests using CONNECT , allowing remote attackers to bypass access restrictions. Root cause described as improper handling of CONNECT tunneling for remap requests. Impact is byp...