Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in Apache Traffic Server ausnutzen, um einen Denial of Service- oder Request-Smuggling-Angriff durchzuführen.
Product
Apache Traffic Server ist ein skalier- und erweiterbarer, mit HTTP/1.1 kompatibler "caching proxy server".
Vulnerabilities 2
-
High 7.5
Apache Traffic Server: A simple legitimate POST request causes a crash
A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through 9.2.12. Users are recommended to upgrade to version 10.1.2 or 9.2.13, which fix the issue. A work…
-
High 7.5
Apache Traffic Server: Malformed chunked message body allows request smuggling
Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.12, from 10.0.0 through 10.1.1. Users are recommended to upgrade to version 9.2.13 or 10.1.2, which fix the iss…
Revision history
-
#1
Initiale Fassung
References
-
Mailing List OSS Security vom 2026-04-02
https://seclists.org/oss-sec/2026/q2/10
-
Fedora Security Advisory FEDORA-2026-7839A46D9D vom 2026-04-02
https://bodhi.fedoraproject.org/updates/FEDORA-2026-7839a46d9d
-
Fedora Security Advisory FEDORA-EPEL-2026-7D17B6D554 vom 2026-04-02
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-7d17b6d554
-
Fedora Security Advisory FEDORA-2026-A157BD84C4 vom 2026-04-02
https://bodhi.fedoraproject.org/updates/FEDORA-2026-a157bd84c4
-
Fedora Security Advisory FEDORA-2026-7B719A7A58 vom 2026-04-02
https://bodhi.fedoraproject.org/updates/FEDORA-2026-7b719a7a58
-
Debian Security Advisory DSA-6199 vom 2026-04-05
https://lists.debian.org/debian-security-announce/2026/msg00108.html
-
Fedora Security Advisory FEDORA-EPEL-2026-EC5DF302A7 vom 2026-04-02
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-ec5df302a7