CVE-2017-5659: Improper Input Validation

Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding...

PT-2017-16652

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions prior to 6.2.1 Description The issue arises when there is a mismatch between content length and chunked encoding, causing the software to generate a coredump. Recommendations For versions prior to 6.2.1, update t...

PT-2017-8716

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 6.0.0 through 6.2.0 Description The issue is related to an HPACK Bomb Attack. Recommendations For Apache Traffic Server versions 6.0.0 through 6.2.0, update to a version that is not affected by this issue...

CVE-2016-5396: Undefined Security Weakness

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack...

Apache Traffic Server Version Detection

Binary data 9787.prm...

Apache Traffic Server < 7.0.0 Multiple Vulnerabilities

Binary data 9788.prm...

Apache Traffic Server Detection

Binary data 9786.prm...

Apache Traffic Server 5.1.x < 5.1.1 Multiple Vulnerabilities (POODLE)

Binary data 9081.prm...

Apache Traffic Server 5.3.x < 5.3.1 'url_sig' Plugin Multiple Vulnerabilities

Binary data 9070.prm...

Apache Traffic Server 5.3.x < 5.3.2 HTTP2 Multiple Vulnerabilities

Binary data 9071.prm...

Apache Traffic Server 5.3.x < 5.3.1 'url_sig' Plugin Multiple Vulnerabilities

According to its banner, the version of Apache Traffic Server running on the remote host is 5.3.x prior to 5.3.1. It is, therefore, affected by multiple vulnerabilities related to the 'urlsig' plugin : - An out-of-bounds access error exists that is triggered when handling a specially crafted HTTP...

Apache Traffic Server 5.3.x < 5.3.2 HTTP2 Multiple Vulnerabilities

According to its banner, the version of Apache Traffic Server running on the remote host is 5.3.x prior to 5.3.2. It is, therefore, affected by multiple vulnerabilities related to improper handling of HTTP/2 requests. An attacker can exploit these vulnerabilities to have an unspecified impact. No...

PT-2015-3354

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 5.3.x before 5.3.1 Description The issue is related to the experimental HTTP/2 feature, which allows remote attackers to cause a denial of service or possibly execute arbitrary code. This is due to out-of-bounds...

[SECURITY] Fedora 21 Update: trafficserver-5.3.0-1.fc21

Apache Traffic Server is a fast, scalable and extensible HTTP/1.1 compliant caching proxy server...

PT-2015-3319

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions prior to 5.3.2 Description The issue is related to the HTTP/2 experimental feature in Apache Traffic Server, where an unspecified vulnerability exists due to incorrect handling of HTTP/2 requests. This could allo...

PT-2015-3320

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 5.3.x through 5.3.1 Description The issue is related to the HTTP/2 experimental feature in Apache Traffic Server. It is caused by incorrect handling of HTTP/2 requests. Exploitation of this issue may allow a remo...

Apache Traffic Server 5.x < 5.1.2 DoS

Binary data 8622.prm...

Apache Traffic Server < 4.2.1.1 / 5.0.1 DoS

Binary data 8621.prm...

Apache Traffic Server 4.x < 4.2.0 XSS

Binary data 8623.prm...

Apache Traffic Server Unsupported

According to its banner, the version of Apache Traffic Server running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network...