Summary
Masakazu Kitajo discovered that Apache Traffic Server did not properly
handle the Valid Host header field. An attacker could possibly use this
issue to cause a denial of service (DoS).
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | trafficserver | 9.1.1+ds-2ubuntu0.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | trafficserver | 9.2.3+ds-1+deb12u1ubuntu0.1 |
| Ubuntu · 25.10 | trafficserver | 9.2.5+ds-1ubuntu2.1 |
Vulnerabilities 1
-
High 7.5
Apache Traffic Server: Valid Host field value can cause crashes
Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have th…
References
-
report
https://ubuntu.com/security/CVE-2024-50305