Privilege Escalation

2022-08-1819:20:48

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.006 Low

EPSS

Percentile

78.6%

JSON

trafficserver is vulnerable to privilege escalation. The vulnerability exists due to the improper input validation in the HTTP/2 requests, allowing an attacker to create smuggle or cache poison attacks through the malicious HTTP/2 requests.

CPENameOperatorVersion
trafficserver:sideq8.1.0+ds-2
trafficserver:sideq8.1.0+ds-2
trafficserver:bustereq8.0.2+ds-1+deb10u4
trafficserver:bustereq8.0.2+ds-1+deb10u5
trafficserver:bustereq8.0.2+ds-1+deb10u3

Name	Operator	Version
trafficserver:sid	eq	8.1.0+ds-2
trafficserver:sid	eq	8.1.0+ds-2
trafficserver:buster	eq	8.0.2+ds-1+deb10u4
trafficserver:buster	eq	8.0.2+ds-1+deb10u5
trafficserver:buster	eq	8.0.2+ds-1+deb10u3