Skip to contentApache Traffic Server vulnerabilities
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of serviceCVE-2019-9513Public exploitFix availableEPSS 81.6%7.5 High
- apache traffic server, apple swiftnio, debian linux +1 more +3 moreSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of serviceCVE-2019-9512Fix availableEPSS 83.4%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of serviceCVE-2019-9511Public exploitFix availableEPSS 59.5%7.5 High
- apache traffic serversslheaders plugin extracts information from the client certificate and sets headers in the...CVE-2018-11783Fix available7.5 High
- apache traffic server, debian linux +1 morePages that are rendered using the ESI plugin can have access to the cookie header when the plugin...CVE-2018-8040Fix available5.3 Medium
- apache traffic serverA carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This...CVE-2018-8022Fix available7.5 High
- apache traffic server, debian linux +1 moreWhen there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the...CVE-2018-8005Fix available5.3 Medium
- apache traffic server, debian linux +1 moreThere are multiple HTTP smuggling and cache poisoning issues when clients making malicious...CVE-2018-8004Public exploitFix available6.5 Medium
- apache traffic server, debian linux +1 moreAdding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted...CVE-2018-1318Fix available7.5 High
- apache traffic server, debian linux +1 moreThere is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0...CVE-2017-7671Fix available7.5 High
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with...CVE-2017-5660Fix available8.6 High
- apache traffic serverThe HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote...CVE-2015-3249Fix available9.8 Critical
- apache traffic serverApache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by...CVE-2014-3624Fix available9.8 Critical
- apache traffic serverUnspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3...CVE-2015-5206Fix available9.8 Critical
- apache traffic serverUnspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x...CVE-2015-5168Fix available9.8 Critical
- apache traffic serverApache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content...CVE-2017-5659Fix available7.5 High
- apache traffic serverApache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.CVE-2016-5396Fix available7.5 High
- apache traffic serverApache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via...CVE-2014-10022Fix available5.0 Medium
- apache traffic serverUnspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x...CVE-2014-3525Fix available10.0 High
- apache traffic serverApache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly...CVE-2012-0256Fix available5.0 Medium
- apache traffic serverApache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS...CVE-2010-29524.3 Medium