Apache Traffic Server vulnerabilities
82 known vulnerabilities affecting apache/traffic_server.
Total CVEs
82
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL12HIGH56MEDIUM14
Vulnerabilities
Page 5 of 5
CVE-2024-56202P4MEDIUMCVSS 4.3≥ 9.0.0, < 9.2.9≥ 10.0.0, < 10.0.42025-03-06
CVE-2024-56202 [MEDIUM] CWE-440 CVE-2024-56202: Expected Behavior Violation vulnerability in Apache Traffic Server. This issue affects Apache Traff
Expected Behavior Violation vulnerability in Apache Traffic Server.
This issue affects Apache Traffic Server: from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3.
Users are recommended to upgrade to versions 9.2.9 or 10.0.4 or newer, which fixes the issue.
nvd
CVE-2010-2952P4MEDIUMCVSS 4.3≤ 2.0.0v2.1.0+1 more2010-09-13
CVE-2010-2952 [MEDIUM] CWE-20 CVE-2010-2952: Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS so
Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS source ports and transaction IDs, and does not properly use DNS query fields to validate responses, which makes it easier for man-in-the-middle attackers to poison the internal DNS cache via a crafted response.
nvd
← Previous5 / 5