Filtered by vendor Apache Software Foundation Subscriptions
Filtered by product Apache Traffic Server Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-41752 3 Apache, Apache Software Foundation, Fedoraproject 3 Traffic Server, Apache Traffic Server, Fedora 2025-02-13 7.5 High
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Traffic Server.This issue affects Apache Traffic Server: from 8.0.0 through 8.1.8, from 9.0.0 through 9.2.2. Users are recommended to upgrade to version 8.1.9 or 9.2.3, which fixes the issue.
CVE-2024-38479 1 Apache Software Foundation 1 Apache Traffic Server 2024-11-15 7.5 High
Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.
CVE-2024-50305 1 Apache Software Foundation 1 Apache Traffic Server 2024-11-15 7.5 High
Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.
CVE-2024-50306 1 Apache Software Foundation 1 Apache Traffic Server 2024-11-15 9.1 Critical
Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue.