Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-25763

Опубликовано: 10 авг. 2022
Источник: debian

Описание

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
trafficserverfixed9.1.3+ds-1package

Примечания

  • https://lists.apache.org/thread/rc64lwbdgrkv674koc3zl1sljr9vwg21

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 3 лет назад

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

CVSS3: 7.5
nvd
больше 3 лет назад

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

CVSS3: 7.5
github
больше 3 лет назад

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.