DLA-3385-1 trafficserver - security update

Bulletin has no description...

Debian: Security Advisory (DLA-3279-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3279-1] trafficserver security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3279-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA January 23, 2023 https://wiki.debian.org/LTS -...

DLA-3279-1 trafficserver - security update

Bulletin has no description...

Debian DSA-5311-1 : trafficserver - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5311 advisory. Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in HTTP request smuggling, cache poisonin...

Debian: Security Advisory (DSA-5311-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5311-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5311-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 08, 2023 https://www.debian.org/security/faq -...

DSA-5311-1 trafficserver - security update

Bulletin has no description...

Denial Of Service (DoS)

trafficserver is vulnerable to denial of service DoS attacks. Improper checks for unusual or exceptional conditions handling requests allows an attacker to crash the server under certain conditions...

Cross-site Scripting (XSS)

trafficserver is vulnerable to improper input validation. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious javascript...

Information Disclosure

trafficserver is vulnerable to information disclosure. A remote attacker is able to gain access to sensitive information due to improper checks for unusual or exceptional conditions...

Fedora: Security Advisory for trafficserver (FEDORA-2022-489ea47e69)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for trafficserver (FEDORA-2022-62b61a8542)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for trafficserver (FEDORA-2022-9832c0c04b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for trafficserver (FEDORA-2022-23043f5a0b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Improper Input Validation

trafficserver is vulnerable to improper input validation. The vulnerability exists in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers...

Improper Input Validation

trafficserver is vulnerable to improper input validation vulnerability. The vulnerability exists in HTTP/2 header parsing of Apache Traffic Server which allows an attacker to smuggle requests...

Cross-site Scripting (XSS)

trafficserver is vulnerable to cross-site scripting attacks. Vulnerability exists due to improper Input validation in handling the transfer-encoding header of apache traffic server allows an attacker to poison the cache...

Improper Input Validation

trafficserver is vulnerable to improper input validation. The vulnerability exist in HTTP/2 frame handling of Apache Traffic Server which allows an attacker to smuggle requests...

Privilege Escalation

trafficserver is vulnerable to privilege escalation. The vulnerability exists due to the improper input validation in the HTTP/2 requests, allowing an attacker to create smuggle or cache poison attacks through the malicious HTTP/2 requests...