Aller au contenu

Vulnérabilités de Apache Software Foundation Apache Traffic Server

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2020-9494 Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2… Non notée 24 juin 2020
CVE-2018-11783 sslheaders plugin extracts information from the client certificate and sets headers in the request based on the… Non notée 7 mars 2019
CVE-2018-8005 When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache Non notée 29 août 2018
CVE-2018-8004 There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apache… Non notée 29 août 2018
CVE-2018-8022 A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault Non notée 29 août 2018
CVE-2018-8040 Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to… Non notée 29 août 2018
CVE-2018-1318 Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request Non notée 29 août 2018
CVE-2017-7671 There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the… Non notée 27 févr. 2018
CVE-2017-5660 There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and… Non notée 27 févr. 2018
CVE-2017-5659 Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked… Non notée 17 avr. 2017
CVE-2016-5396 Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack Non notée 17 avr. 2017

Autres produits Apache Software Foundation