trafficserver vulnerabilities (Debian)
128 vulnerabilities.
trafficserverDebianApache Traffic Server: Request smuggling via chunked extension quoted-string parsing6.9 MediumtrafficserverDebianApache Traffic Server: Untrusted @ headers can spoof ATS internal metadata7.7 HightrafficserverDebianApache Traffic Server: Regex mappings match with malicious domain names6.9 MediumtrafficserverDebianApache Traffic Server: SNI to Host header matching policy is not properly enforced7.0 HightrafficserverDebianApache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions7.5 HightrafficserverDebianApache Traffic Server: Malformed chunked message body allows request smuggling7.5 HightrafficserverDebianApache Traffic Server: A simple legitimate POST request causes a crash7.5 HightrafficserverDebianApache Traffic Server: Client IP address from PROXY protocol is not used for ACL7.5 HightrafficserverDebianApache Traffic Server: Remote DoS via memory exhaustion in ESI Plugin7.5 HightrafficserverDebianApache Traffic Server: Malformed chunked message body allows request smuggling7.5 HightrafficserverDebianApache Traffic Server: Request smuggling via pipelining after a chunked message body6.3 MediumtrafficserverDebianApache Traffic Server: Intercept plugins are not access controlled6.3 MediumtrafficserverDebianApache Traffic Server: Expect header field can unreasonably retain resource4.3 MediumtrafficserverDebianApache Traffic Server: Server process can fail to drop privilege9.1 CriticaltrafficserverDebianApache Traffic Server: Valid Host field value can cause crashes7.5 HightrafficserverDebianApache Traffic Server: Cache key plugin is vulnerable to cache poisoning attack7.5 HightrafficserverDebianApache Traffic Server: Incomplete field name check allows request smuggling7.5 HightrafficserverDebianApache Traffic Server: Invalid Accept-Encoding can force forwarding requests8.2 HightrafficserverDebianApache Traffic Server: Incomplete check for chunked trailer section allows request smuggling7.5 HightrafficserverDebianApache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attack7.5 HightrafficserverDebianApache Traffic Server: Malformed http/2 frames can cause an abort7.5 HightrafficserverDebianApache Traffic Server: s3_auth plugin problem with hash calculation7.5 HightrafficserverDebianApache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies9.1 CriticaltrafficserverDebianApache Traffic Server: Invalid Range header causes a crash7.5 HightrafficserverDebianEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HightrafficserverDebianApache Traffic Server: Configuration option to block the PUSH method in ATS didn't work7.5 HightrafficserverDebianApache Traffic Server: s3_auth plugin problem with hash calculation7.5 HightrafficserverDebianApache Traffic Server: The TRACE method can be use to disclose network information7.5 HightrafficserverDebianApache Traffic Server: Security issues with the xdebug plugin6.1 MediumtrafficserverDebianApache Traffic Server: Improperly reading the client requests5.3 MediumtrafficserverDebianApache Traffic Server: Improperly handled requests can cause crashes in specific plugins7.5 HightrafficserverDebianImproper HTTP/2 scheme and method validation7.5 HightrafficserverDebianImproper input validation on HTTP/2 headers7.5 HightrafficserverDebianHTTP/2 framing vulnerabilities7.5 HightrafficserverDebianTransfer-Encoding not treated as hop-by-hop7.5 HightrafficserverDebianInsufficient Validation of HTTP/1.x Headers7.5 HightrafficserverDebianProtocol vs scheme mismatch7.5 HightrafficserverDebianImproper authentication vulnerability in TLS origin verification8.1 HightrafficserverDebianHTTP request line fuzzing attacks7.5 HightrafficserverDebianheap-buffer-overflow with stats-over-http plugin9.8 CriticaltrafficserverDebianNot validating origin TLS certificate8.1 HightrafficserverDebianRequest Smuggling - multiple attacks7.5 HightrafficserverDebianRequest Smuggling - transfer encoding validation7.5 HightrafficserverDebianRequest Smuggling - LF line ending7.5 HightrafficserverDebianDynamic stack buffer overflow in cachekey plugin9.8 CriticaltrafficserverDebianReading HTTP/2 frames too many times7.5 HightrafficserverDebianSpecific sequence of HTTP/2 frames can cause ATS to crash7.5 HightrafficserverDebianHTTP Request Smuggling, content length with invalid charters7.5 HightrafficserverDebianIncorrect handling of url fragment leads to cache poisoning7.5 HightrafficserverDebianATS negative cache option is vulnerable to a cache poisoning attack. If you have this option...7.5 High- Show moreLoading…