Описание
Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| trafficserver | fixed | 9.2.2+ds-1 | package |
Примечания
https://lists.apache.org/thread/jsl6dfdgs1mjjo1mbtyflyjr7xftswhc
https://github.com/apache/trafficserver/issues/9265
https://github.com/apache/trafficserver/pull/10131
https://github.com/apache/trafficserver/commit/5d0835ea5a57003798497d07331fa4f89823c750 (9.2.2-rc0)
https://github.com/apache/trafficserver/commit/c50ee6c4f2ae32f2c849fccb5b0f367165fe9c20 (8.1.8-rc0)
EPSS
Связанные уязвимости
Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.
Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.
Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.
Уязвимость компонента Range Header Handler веб-сервера Apache Traffic Server, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю вызвать отказ в обслуживании
EPSS