DSA-5206: -1 trafficserver -- security update

Published Aug 12, 2022

Updated

Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in HTTP request smuggling, cache poisoning or information disclosure.

Affected Software

2 affected components

debian/trafficserver

Event History

Aug 12, 2022

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2021-37150
CVE-2022-25763
CVE-2022-28129
CVE-2022-31779
CVE-2022-31780
CVE-2022-31778

Frequently Asked Questions

Which deployments are exposed to these issues?

Apache Traffic Server deployments used as reverse or forward proxies are in scope. The advisory identifies potential impacts including HTTP request smuggling, cache poisoning, and information disclosure.

What information is available about the affected vulnerabilities?

The update covers CVE-2021-37150, CVE-2022-25763, and CVE-2022-28129. No affected version range, exploit prerequisites, configuration conditions, or workaround is provided in the supplied advisory data.

DSA-5206: -1 trafficserver -- security update

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which deployments are exposed to these issues?

What information is available about the affected vulnerabilities?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to these issues?

What information is available about the affected vulnerabilities?