Traffic Server
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:traffic_server:*:-:*:*:*:*:*:*
part: a version: * update: -
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Traffic Server (c0ff314f-21c5-5e35-91ea-c5f580192191) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/trafficserver |
purl2cpe | 2026-06-01 10:14:32.810511 |
pkg:deb/debian/trafficserver |
purl2cpe | 2026-06-01 10:14:32.810513 |
pkg:deb/ubuntu/trafficserver |
purl2cpe | 2026-06-01 10:14:32.810514 |
pkg:github/alibaba/trafficserver |
purl2cpe | 2026-06-01 10:14:32.810516 |
pkg:github/apache/trafficserver |
purl2cpe | 2026-06-01 10:14:32.810517 |
pkg:maven/org.apache.trafficserver/trafficserver |
purl2cpe | 2026-06-01 10:14:32.810518 |
pkg:rpm/opensuse/apache-trafficserver |
purl2cpe | 2026-06-01 10:14:32.810520 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-50306 |
vulnerable | 2026-06-08 06:52:09.588209 |
Apache Traffic Server: Server process can fail to drop privilege
Unchecked return value can allow Apache Traffic Server to retain privileges on startup.
This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1.
Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue.
Published: 2024-11-14T09:55:43.037Z
Updated: 2025-11-03T20:45:12.036Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50305 |
vulnerable | 2026-06-08 06:52:09.587676 |
Apache Traffic Server: Valid Host field value can cause crashes
Valid Host header field can cause Apache Traffic Server to crash on some platforms.
This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.
Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.
Published: 2024-11-14T09:54:20.652Z
Updated: 2024-11-14T18:15:38.823Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38479 |
vulnerable | 2026-06-08 06:41:47.240131 |
Apache Traffic Server: Cache key plugin is vulnerable to cache poisoning attack
Improper Input Validation vulnerability in Apache Traffic Server.
This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5.
Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.
Published: 2024-11-14T09:52:14.291Z
Updated: 2025-11-03T20:38:05.702Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.