DeutschShown in its original language — a full translation is planned for a future version.
Apache Traffic Server: Mehrere Schwachstellen ermöglichen Manipulation von Dateien
view advisory published 2022-08-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Traffic Server ausnutzen, um Dateien zu manipulieren oder sonstige Auswirkungen zu verursachen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-31780US | high7.5 | — | ||
Improper Input Validation vulnerability in HTTP/2 frame handling of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to… | ||||
| CVE-2022-31779US | high7.5 | — | ||
Improper Input Validation vulnerability in HTTP/2 header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to… | ||||
| CVE-2022-31778US | high7.5 | — | ||
Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic… | ||||
| CVE-2022-28129US | high7.5 | — | ||
Improper Input Validation vulnerability in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers. This issue affects Apache Traffic Server 8.0… | ||||
| CVE-2022-25763US | high7.5 | — | ||
Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apach… | ||||
| CVE-2021-37150US | high7.5 | — | ||
Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to request secure resources. This issue affects Apache Traffic Server 8.0.0 to… | ||||
02
references
External citations — patches, advisories, analysis.
- Apache Security Advisory vom 2022-08-09external
- Debian Security Advisory DLA-3279 vom 2023-01-23external
- Debian Security Advisory DLA-3385 vom 2023-04-06external
- Debian Security Advisory DSA-5206 vom 2022-08-12external
- NIST Database vom 2022-08-09external
- WID-SEC-W-2022-0992 - CSAF Versionself
- WID-SEC-2022-0992 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan