tocsin

Debian/trafficserver: high 7.5

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0

Action: Upgrade trafficserver to 9.1.3+ds-1 or later.

Affected

introducedfixedlast affected
09.1.3+ds-1-

Fixed versions

9.1.3+ds-1

Sources

published · modified · JSON