Debian/trafficserver: high 7.5

Apache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read attack.

Action: Upgrade trafficserver to 8.0.7+ds-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2020-9481
• https://security-tracker.debian.org/tracker/CVE-2020-9481

published 2020-04-27T22:15:12.457Z · modified 2026-09-11T11:02:50.228671492Z · JSON