Critical DLA-3595-1 2 CVEs

trafficserver - security update

Published Sep 30, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	trafficserver	8.1.7-0+deb10u2

Vulnerabilities 2

Critical 9.1

CVE-2023-33934

Apache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies

Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.

Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu

Aug 9, 2023
High 7.5

CVE-2022-47185

Apache Traffic Server: Invalid Range header causes a crash

Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.

Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu

Aug 9, 2023