First published: Mon Apr 28 2025(Updated: )
It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protocol. An attacker could possibly use this issue to cause Apache Traffic Server to crash, resulting in a denial of service.
Affected Software | Affected Version | How to fix |
---|---|---|
Apache Traffic Server |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-7469-1 is classified as high due to its potential for causing a denial of service.
To fix USN-7469-1, you should upgrade to Apache Traffic Server version 9.1.1+ds-2ubuntu0.1~esm1 or 8.0.5+ds-3ubuntu0.1~esm1, depending on your Ubuntu version.
USN-7469-1 affects Ubuntu 22.04 and 20.04 systems that have Apache Traffic Server installed.
USN-7469-1 impacts the Apache Traffic Server and Apache Traffic Server Development packages.
Currently, there are no known workarounds for USN-7469-1, making an upgrade the primary mitigation.