Improper Input Validation

2022-08-2102:46:43

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

trafficserver

input validation

http/2

apache traffic server

vulnerability

smuggle requests

0.003 Low

EPSS

Percentile

68.0%

JSON

trafficserver is vulnerable to improper input validation vulnerability. The vulnerability exists in HTTP/2 header parsing of Apache Traffic Server which allows an attacker to smuggle requests.

CPENameOperatorVersion
trafficserver:sideq8.1.0+ds-2
trafficserver:sideq8.1.0+ds-2
trafficserver:bustereq8.0.2+ds-1+deb10u4
trafficserver:bustereq8.0.2+ds-1+deb10u3
trafficserver:bustereq8.0.2+ds-1+deb10u5

Name	Operator	Version
trafficserver:sid	eq	8.1.0+ds-2
trafficserver:sid	eq	8.1.0+ds-2
trafficserver:buster	eq	8.0.2+ds-1+deb10u4
trafficserver:buster	eq	8.0.2+ds-1+deb10u3
trafficserver:buster	eq	8.0.2+ds-1+deb10u5