trafficserver vulnerabilities (Ubuntu)
120 vulnerabilities.
trafficserverUbuntuApache Traffic Server: Request smuggling via chunked extension quoted-string parsing6.9 MediumtrafficserverUbuntuApache Traffic Server: Untrusted @ headers can spoof ATS internal metadata7.7 HightrafficserverUbuntuApache Traffic Server: Regex mappings match with malicious domain names6.9 MediumtrafficserverUbuntuApache Traffic Server: SNI to Host header matching policy is not properly enforced7.0 HightrafficserverUbuntuApache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions7.5 HightrafficserverUbuntuApache Traffic Server: Malformed chunked message body allows request smuggling7.5 HightrafficserverUbuntuApache Traffic Server: A simple legitimate POST request causes a crash7.5 HightrafficserverUbuntuApache Traffic Server: Client IP address from PROXY protocol is not used for ACL7.5 HightrafficserverUbuntuApache Traffic Server: Remote DoS via memory exhaustion in ESI Plugin7.5 HightrafficserverUbuntuApache Traffic Server: Malformed chunked message body allows request smuggling7.5 HightrafficserverUbuntuApache Traffic Server: Request smuggling via pipelining after a chunked message body6.3 MediumtrafficserverUbuntuApache Traffic Server: Intercept plugins are not access controlled6.3 MediumtrafficserverUbuntuApache Traffic Server: Expect header field can unreasonably retain resource4.3 MediumtrafficserverUbuntuApache Traffic Server: Server process can fail to drop privilege9.1 CriticaltrafficserverUbuntuApache Traffic Server: Valid Host field value can cause crashes7.5 HightrafficserverUbuntuApache Traffic Server: Cache key plugin is vulnerable to cache poisoning attack7.5 HightrafficserverUbuntuApache Traffic Server: Incomplete field name check allows request smuggling7.5 HightrafficserverUbuntuApache Traffic Server: Invalid Accept-Encoding can force forwarding requests8.2 HightrafficserverUbuntuApache Traffic Server: Incomplete check for chunked trailer section allows request smuggling7.5 HightrafficserverUbuntuApache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attack7.5 HightrafficserverUbuntuApache Traffic Server: Malformed http/2 frames can cause an abort7.5 HightrafficserverUbuntuApache Traffic Server: s3_auth plugin problem with hash calculation7.5 HightrafficserverUbuntuApache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies9.1 CriticaltrafficserverUbuntuApache Traffic Server: Invalid Range header causes a crash7.5 HightrafficserverUbuntuEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HightrafficserverUbuntuApache Traffic Server: Configuration option to block the PUSH method in ATS didn't work7.5 HightrafficserverUbuntuApache Traffic Server: s3_auth plugin problem with hash calculation7.5 HightrafficserverUbuntuApache Traffic Server: The TRACE method can be use to disclose network information7.5 HightrafficserverUbuntuApache Traffic Server: Security issues with the xdebug plugin6.1 MediumtrafficserverUbuntuApache Traffic Server: Improperly reading the client requests5.3 MediumtrafficserverUbuntuApache Traffic Server: Improperly handled requests can cause crashes in specific plugins7.5 HightrafficserverUbuntuImproper HTTP/2 scheme and method validation7.5 HightrafficserverUbuntuImproper input validation on HTTP/2 headers7.5 HightrafficserverUbuntuHTTP/2 framing vulnerabilities7.5 HightrafficserverUbuntuTransfer-Encoding not treated as hop-by-hop7.5 HightrafficserverUbuntuInsufficient Validation of HTTP/1.x Headers7.5 HightrafficserverUbuntuProtocol vs scheme mismatch7.5 HightrafficserverUbuntuImproper authentication vulnerability in TLS origin verification8.1 HightrafficserverUbuntuHTTP request line fuzzing attacks7.5 HightrafficserverUbuntuNot validating origin TLS certificate8.1 HightrafficserverUbuntuRequest Smuggling - multiple attacks7.5 HightrafficserverUbuntuRequest Smuggling - transfer encoding validation7.5 HightrafficserverUbuntuRequest Smuggling - LF line ending7.5 HightrafficserverUbuntuDynamic stack buffer overflow in cachekey plugin9.8 CriticaltrafficserverUbuntuReading HTTP/2 frames too many times7.5 HightrafficserverUbuntuSpecific sequence of HTTP/2 frames can cause ATS to crash7.5 HightrafficserverUbuntuHTTP Request Smuggling, content length with invalid charters7.5 HightrafficserverUbuntuIncorrect handling of url fragment leads to cache poisoning7.5 HightrafficserverUbuntuATS negative cache option is vulnerable to a cache poisoning attack. If you have this option...7.5 HightrafficserverUbuntuThe ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please...7.5 High- Show moreLoading…