CVE-2015-5206: Critical severity apache traffic server vulnerability
Published Sep 13, 2017
·Updated
Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168.
Affected Software
2 affected components
Apache Traffic Server=5.3.0
Apache Traffic Server=5.3.1
Event History
Sep 13, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5206?
The severity level of CVE-2015-5206 is currently unknown due to unspecified impact and attack vectors.
2
How do I fix CVE-2015-5206?
To fix CVE-2015-5206, upgrade Apache Traffic Server to version 5.3.2 or later.
3
Which versions of Apache Traffic Server are affected by CVE-2015-5206?
CVE-2015-5206 affects Apache Traffic Server versions 5.3.0 and 5.3.1.
4
Can CVE-2015-5206 be exploited remotely?
The attack vectors for CVE-2015-5206 are not clearly defined, leaving the potential for remote exploitation unknown.
5
Is CVE-2015-5206 related to any other vulnerabilities?
CVE-2015-5206 is a different vulnerability than CVE-2015-5168, though both are associated with the HTTP/2 feature in Apache Traffic Server.