trafficserver vulnerabilities (openEuler)
66 vulnerabilities.
-
trafficserveropenEuler Apache Traffic Server: SNI to Host header matching policy is not properly enforced 7.0 High -
trafficserveropenEuler Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode 6.3 Medium -
trafficserveropenEuler Apache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification 8.2 High -
trafficserveropenEuler Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins 8.4 High -
trafficserveropenEuler Apache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service 6.3 Medium -
trafficserveropenEuler Apache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses 8.2 High -
trafficserveropenEuler Apache Traffic Server: Use-after-free in the intercept plugin 8.2 High -
trafficserveropenEuler Apache Traffic Server: header_rewrite plugin cookie handling can corrupt memory 8.3 High -
trafficserveropenEuler Apache Traffic Server: prefetch plugin can crash on attacker-influenced input 8.2 High -
trafficserveropenEuler Apache Traffic Server: ts_lua plugin has initialization and resource-handling errors 8.2 High -
trafficserveropenEuler Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash 8.2 High -
trafficserveropenEuler Apache Traffic Server: txn_box plugin overflows the stack from attacker input 8.2 High -
trafficserveropenEuler Apache Traffic Server: regex_remap plugin overflows the stack from attacker input 9.2 Critical -
trafficserveropenEuler Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery 8.2 High -
trafficserveropenEuler Apache Traffic Server: HostDB SRV handling leaks memory 8.2 High -
trafficserveropenEuler Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free 8.3 High -
trafficserveropenEuler Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server 8.3 High -
trafficserveropenEuler Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates 8.4 High -
trafficserveropenEuler Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server 9.2 Critical -
trafficserveropenEuler Apache Traffic Server: Out-of-bounds reads while parsing DNS responses 6.3 Medium -
trafficserveropenEuler Apache Traffic Server: Listener and ACL handling allow access-control bypass 7.0 High -
trafficserveropenEuler Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow 8.2 High -
trafficserveropenEuler Apache Traffic Server: Improper server-session reuse can expose data across client connections 6.9 Medium -
trafficserveropenEuler Apache Traffic Server: URL and port parsing errors allow access-control bypass 6.3 Medium -
trafficserveropenEuler Apache Traffic Server: Header-name length truncation enables header aliasing and request smuggling 9.2 Critical -
trafficserveropenEuler Apache Traffic Server: Memory-safety errors in MIME and header parsing 9.2 Critical -
trafficserveropenEuler Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification 6.3 Medium -
trafficserveropenEuler Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion 8.2 High -
trafficserveropenEuler Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely 6.3 Medium -
trafficserveropenEuler Apache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memory 6.9 Medium -
trafficserveropenEuler Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the server 8.7 High -
trafficserveropenEuler Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smuggling 7.8 High -
trafficserveropenEuler Apache Traffic Server: Malformed chunked message body allows request smuggling 7.0 High -
trafficserveropenEuler Apache Traffic Server: Buffer overflow via Host field that has a long string value 8.2 High -
trafficserveropenEuler Apache Traffic Server: Request smuggling via chunked extension quoted-string parsing 6.9 Medium -
trafficserveropenEuler Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata 7.7 High -
trafficserveropenEuler Apache Traffic Server: Regex mappings match with malicious domain names 6.9 Medium -
trafficserveropenEuler Apache Traffic Server: SNI to Host header matching policy is not properly enforced 7.0 High -
trafficserveropenEuler Apache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions 7.5 High -
trafficserveropenEuler Apache Traffic Server: Malformed chunked message body allows request smuggling 7.5 High -
trafficserveropenEuler Apache Traffic Server: A simple legitimate POST request causes a crash 7.5 High -
trafficserveropenEuler Apache Traffic Server: Client IP address from PROXY protocol is not used for ACL 7.5 High -
trafficserveropenEuler Apache Traffic Server: Remote DoS via memory exhaustion in ESI Plugin 7.5 High -
trafficserveropenEuler Apache Traffic Server: Malformed chunked message body allows request smuggling 7.5 High -
trafficserveropenEuler Apache Traffic Server: Request smuggling via pipelining after a chunked message body 6.3 Medium -
trafficserveropenEuler Apache Traffic Server: Intercept plugins are not access controlled 6.3 Medium -
trafficserveropenEuler Apache Traffic Server: Expect header field can unreasonably retain resource 4.3 Medium -
trafficserveropenEuler Apache Traffic Server: Server process can fail to drop privilege 9.1 Critical -
trafficserveropenEuler Apache Traffic Server: Valid Host field value can cause crashes 7.5 High -
trafficserveropenEuler Apache Traffic Server: Cache key plugin is vulnerable to cache poisoning attack 7.5 High - Show olderLoading…