CVE-2024-50305: Apache Traffic Server: Valid Host field value can cause crashes
Published Nov 14, 2024
·Updated
Valid Host header field can cause Apache Traffic Server to crash on some platforms.
This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.
Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.
Affected Software
2 affected components
Apache Traffic Server>=9.2.0<=9.2.5
Apache Traffic Server>=9.0.0<9.2.6
Event History
Nov 14, 2024
CVE Published
via MITRE·09:54 AM
Data Sourced
via MITRE·09:54 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-50305?
CVE-2024-50305 is considered a critical vulnerability due to its ability to cause Apache Traffic Server crashes.
2
How do I fix CVE-2024-50305?
To address CVE-2024-50305, upgrade Apache Traffic Server to version 9.2.6 or later.
3
Which versions of Apache Traffic Server are affected by CVE-2024-50305?
CVE-2024-50305 affects Apache Traffic Server versions from 9.2.0 through 9.2.5.
4
Can CVE-2024-50305 cause data loss?
CVE-2024-50305 can lead to crashes but does not specifically indicate data loss.
5
Is there a specific platform impacted by CVE-2024-50305?
CVE-2024-50305 can cause crashes on some platforms running affected versions of Apache Traffic Server.