Summary
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Traffic Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Product
Apache Traffic Server ist ein skalier- und erweiterbarer, mit HTTP/1.1 kompatibler "caching proxy server".
Vulnerabilities 1
-
High 7.5
Apache Traffic Server: Malformed chunked message body allows request smuggling
Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.9, from 10.0.0 through 10.0.4. Users are recommended to upgrade to version 9.2.10 or 10.0.5, which fixes the is…
Revision history
-
#3
Neue Updates von Debian aufgenommen
-
#2
Neue Updates von Fedora aufgenommen
-
#1
Initiale Fassung
References
-
Apache Mailing List vom 2025-04-02
https://lists.apache.org/thread/rwyx91rsrnmpjbm04footfjjf6m9d1c9
-
Red Hat Bugzilla vom 2025-04-02
https://bugzilla.redhat.com/show_bug.cgi?id=2357151
-
RedHJat Customer Portal vom 2025-04-02
https://access.redhat.com/security/cve/CVE-2024-53868
-
Fedora Security Advisory FEDORA-2025-3467F5B68D vom 2025-04-13
https://bodhi.fedoraproject.org/updates/FEDORA-2025-3467f5b68d
-
Fedora Security Advisory FEDORA-EPEL-2025-36EE2E808C vom 2025-04-13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-36ee2e808c
-
Fedora Security Advisory FEDORA-EPEL-2025-5AA53E9DD0 vom 2025-04-13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5aa53e9dd0
-
Fedora Security Advisory FEDORA-2025-76D6CE0E17 vom 2025-04-13
https://bodhi.fedoraproject.org/updates/FEDORA-2025-76d6ce0e17
-
Fedora Security Advisory FEDORA-2025-7C4A6154E5 vom 2025-04-13
https://bodhi.fedoraproject.org/updates/FEDORA-2025-7c4a6154e5
-
Debian Security Advisory DSA-5948 vom 2025-06-25
https://lists.debian.org/debian-security-announce/2025/msg00112.html