tocsin

Debian/trafficserver: high 7.5

Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.

Action: Upgrade trafficserver to 9.1.3+ds-1 or later.

Affected

introducedfixedlast affected
09.1.3+ds-1-

Fixed versions

9.1.3+ds-1

Sources

published · modified · JSON