Skip to contentApache Software Foundation Traffic Server vulnerabilities
- apache traffic serverApache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin.CVE-2021-277377.5 High
- apache traffic serverATS negative cache option is vulnerable to a cache poisoning attack. If you have this option...CVE-2020-17509Fix available7.5 High
- apache traffic serverThe ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please...CVE-2020-17508Fix available7.5 High
- apache traffic server, debian linux +1 moreApache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to...CVE-2020-9494Fix available7.5 High
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...CVE-2020-1944Fix available9.8 Critical
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...CVE-2019-17559Fix available9.8 Critical
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...CVE-2019-17565Fix available9.8 Critical
- apache traffic serverApache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache...CVE-2019-10079Fix available7.5 High
- apache traffic serversslheaders plugin extracts information from the client certificate and sets headers in the...CVE-2018-11783Fix available7.5 High
- apache traffic server, debian linux +1 morePages that are rendered using the ESI plugin can have access to the cookie header when the plugin...CVE-2018-8040Fix available5.3 Medium
- apache traffic serverA carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This...CVE-2018-8022Fix available7.5 High
- apache traffic server, debian linux +1 moreWhen there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the...CVE-2018-8005Fix available5.3 Medium
- apache traffic server, debian linux +1 moreThere are multiple HTTP smuggling and cache poisoning issues when clients making malicious...CVE-2018-8004Public exploitFix available6.5 Medium
- apache traffic server, debian linux +1 moreAdding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted...CVE-2018-1318Fix available7.5 High
- apache traffic server, debian linux +1 moreThere is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0...CVE-2017-7671Fix available7.5 High
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with...CVE-2017-5660Fix available8.6 High
- apache traffic serverApache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content...CVE-2017-5659Fix available7.5 High
- apache traffic serverApache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.CVE-2016-5396Fix available7.5 High