CVE-2015-5168: Critical severity apache traffic server vulnerability
Published Sep 13, 2017
·Updated
Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206.
Affected Software
2 affected components
Apache Traffic Server=5.3.0
Apache Traffic Server=5.3.1
Event History
Sep 13, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5168?
The severity of CVE-2015-5168 is currently unknown due to unspecified impact and attack vectors.
2
How do I fix CVE-2015-5168?
To fix CVE-2015-5168, upgrade Apache Traffic Server to version 5.3.2 or later.
3
Which versions of Apache Traffic Server are affected by CVE-2015-5168?
CVE-2015-5168 affects Apache Traffic Server versions 5.3.0 and 5.3.1.
4
Is CVE-2015-5168 related to CVE-2015-5206?
CVE-2015-5168 is a different vulnerability from CVE-2015-5206.
5
When was CVE-2015-5168 announced?
CVE-2015-5168 was announced in September 2015.