cbcvebase.

Apache Traffic Server vulnerabilities

121 known vulnerabilities affecting apache/traffic_server.

Total CVEs
121
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL22HIGH76MEDIUM23

Vulnerabilities

Page 7 of 7
CVE-2010-2952P4MEDIUMCVSS 4.3≤ 2.0.0v2.1.0+1 more2010-09-13
CVE-2010-2952 [MEDIUM] CWE-20 CVE-2010-2952: Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS so Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS source ports and transaction IDs, and does not properly use DNS query fields to validate responses, which makes it easier for man-in-the-middle attackers to poison the internal DNS cache via a crafted response.
nvd
← Previous7 / 7
Apache Traffic Server vulnerabilities | cvebase