Skip to content

Vulnerabilities of Apache Software Foundation Apache Traffic Server

Is your version affected?

CVE Summary Score Published
CVE-2020-9494 Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2… Not rated Jun 24, 2020
CVE-2018-11783 sslheaders plugin extracts information from the client certificate and sets headers in the request based on the… Not rated Mar 7, 2019
CVE-2018-8005 When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache Not rated Aug 29, 2018
CVE-2018-8004 There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apache… Not rated Aug 29, 2018
CVE-2018-8022 A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault Not rated Aug 29, 2018
CVE-2018-8040 Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to… Not rated Aug 29, 2018
CVE-2018-1318 Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request Not rated Aug 29, 2018
CVE-2017-7671 There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the… Not rated Feb 27, 2018
CVE-2017-5660 There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and… Not rated Feb 27, 2018
CVE-2017-5659 Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked… Not rated Apr 17, 2017
CVE-2016-5396 Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack Not rated Apr 17, 2017

Other Apache Software Foundation products