Published: 10/08/2022 Updated: 06/04/2023

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an malicious user to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.2.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache traffic server
debian debian linux 11.0

Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in HTTP request smuggling, cache poisoning or information disclosure For the stable distribution (bullseye), these problems have been fixed in version 815+ds-1~deb11u1 We recommend that you upgrade your trafficserver packages ...

CWE-20 https://lists.apache.org/thread/rc64lwbdgrkv674koc3zl1sljr9vwg21 https://www.debian.org/security/2022/dsa-5206 https://lists.debian.org/debian-lts-announce/2023/04/msg00007.html https://nvd.nist.gov https://www.debian.org/security/2022/dsa-5206

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-31778

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect