trafficserver - security update

Fixed packages 1

Vulnerabilities 4

• High 7.5
  CVE-2022-32749

  Apache Traffic Server: Improperly handled requests can cause crashes in specific plugins

  Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions. This issue affects Apache Traffic Server: from 8.0.0 through 9.1.3.

  Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu
  Dec 19, 2022
• Medium 5.3
  CVE-2022-37392

  Apache Traffic Server: Improperly reading the client requests

  Improper Check for Unusual or Exceptional Conditions vulnerability in handling the requests to Apache Traffic Server. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

  Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu
  Dec 19, 2022
• Unscored —
  CVE-2022-31778

  Transfer-Encoding not treated as hop-by-hop

  Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.2.

  Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu
  Aug 10, 2022
• Unscored —
  CVE-2022-31779

  Improper HTTP/2 scheme and method validation

  Improper Input Validation vulnerability in HTTP/2 header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

  Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu
  Aug 10, 2022