CVE-2024-50306: Apache Traffic Server: Server process can fail to drop privilege
Unchecked return value can allow Apache Traffic Server to retain privileges on startup.
This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1.
Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50306?
CVE-2024-50306 is considered a moderate severity vulnerability affecting Apache Traffic Server.
How do I fix CVE-2024-50306?
To fix CVE-2024-50306, users should upgrade to Apache Traffic Server version 9.2.6 or 10.0.2.
Which versions of Apache Traffic Server are affected by CVE-2024-50306?
CVE-2024-50306 affects Apache Traffic Server versions from 9.2.0 to 9.2.5 and from 10.0.0 to 10.0.1.
What specific issue does CVE-2024-50306 address?
CVE-2024-50306 addresses an unchecked return value that allows Apache Traffic Server to retain elevated privileges on startup.
Is there a workaround for CVE-2024-50306 if I cannot upgrade?
Currently, there is no publicly available workaround for CVE-2024-50306, so upgrading is strongly recommended.