tocsin

Debian/trafficserver: high 7.5

Improper Input Validation vulnerability in HTTP/2 frame handling of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

Action: Upgrade trafficserver to 9.1.3+ds-1 or later.

Affected

introducedfixedlast affected
09.1.3+ds-1-

Fixed versions

9.1.3+ds-1

Sources

published · modified · JSON