Apache Traffic Server
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_traffic_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Traffic Server (55e0296c-e66f-5d9a-b61e-c6cbf66339d6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-59173 |
vulnerable | 2026-07-29 01:03:17.401488 |
Apache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions
Uncontrolled Resource Consumption vulnerability in Apache Traffic Server.
This issue affects Apache Traffic Server: from 9.0.0 through 9.1.13, from 10.0.0 through 10.1.2.
Users are recommended to upgrade to version 9.1.14 or 10.1.3, which fixes the issue.
Published: 2026-07-18T12:52:18.923Z
Updated: 2026-07-20T13:41:03.319Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-65114 |
vulnerable | 2026-06-08 07:39:20.727105 |
Apache Traffic Server: Malformed chunked message body allows request smuggling
Apache Traffic Server allows request smuggling if chunked messages are malformed.
This issue affects Apache Traffic Server: from 9.0.0 through 9.2.12, from 10.0.0 through 10.1.1.
Users are recommended to upgrade to version 9.2.13 or 10.1.2, which fix the issue.
Published: 2026-04-02T15:55:27.280Z
Updated: 2026-04-02T18:10:10.171Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58136 |
vulnerable | 2026-06-08 07:35:17.313989 |
Apache Traffic Server: A simple legitimate POST request causes a crash
A bug in POST request handling causes a crash under a certain condition.
This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through 9.2.12.
Users are recommended to upgrade to version 10.1.2 or 9.2.13, which fix the issue.
A workaround for older versions is to set proxy.config.http.request_buffer_enabled to 0 (the default value is 0).
Published: 2026-04-02T15:54:47.013Z
Updated: 2026-04-02T18:13:21.125Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49763 |
vulnerable | 2026-06-08 07:29:14.912288 |
Apache Traffic Server: Remote DoS via memory exhaustion in ESI Plugin
ESI plugin does not have the limit for maximum inclusion depth, and that allows excessive memory consumption if malicious instructions are inserted.
Users can use a new setting for the plugin (--max-inclusion-depth) to limit it.
This issue affects Apache Traffic Server: from 10.0.0 through 10.0.5, from 9.0.0 through 9.2.10.
Users are recommended to upgrade to version 9.2.11 or 10.0.6, which fixes the issue.
Published: 2025-06-19T10:07:15.450Z
Updated: 2025-06-20T13:56:54.082Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31698 |
vulnerable | 2026-06-08 07:18:58.411573 |
Apache Traffic Server: Client IP address from PROXY protocol is not used for ACL
ACL configured in ip_allow.config or remap.config does not use IP addresses that are provided by PROXY protocol.
Users can use a new setting (proxy.config.acl.subjects) to choose which IP addresses to use for the ACL if Apache Traffic Server is configured to accept PROXY protocol.
This issue affects undefined: from 10.0.0 through 10.0.6, from 9.0.0 through 9.2.10.
Users are recommended to upgrade to version 9.2.11 or 10.0.6, which fixes the issue.
Published: 2025-06-19T10:07:46.733Z
Updated: 2025-06-20T13:32:19.681Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56202 |
vulnerable | 2026-06-08 06:54:17.533770 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56196 |
vulnerable | 2026-06-08 06:54:17.520763 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56195 |
vulnerable | 2026-06-08 06:54:17.520375 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53868 |
vulnerable | 2026-06-08 06:54:15.655488 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50306 |
vulnerable | 2026-06-08 06:52:09.588146 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50305 |
vulnerable | 2026-06-08 06:52:09.578168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38479 |
vulnerable | 2026-06-08 06:41:47.238102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38311 |
vulnerable | 2026-06-08 06:41:45.003353 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35296 |
vulnerable | 2026-06-08 06:37:35.888362 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35161 |
vulnerable | 2026-06-08 06:37:35.354516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31309 |
vulnerable | 2026-06-08 06:35:31.276516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41752 |
vulnerable | 2026-06-08 06:11:06.884437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39456 |
vulnerable | 2026-06-08 06:09:37.532683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38522 |
vulnerable | 2026-06-08 06:08:18.161852 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33934 |
vulnerable | 2026-06-08 06:06:23.897049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33933 |
vulnerable | 2026-06-08 06:06:23.896526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30631 |
vulnerable | 2026-06-08 06:04:39.991014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47185 |
vulnerable | 2026-06-08 05:50:39.976885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47184 |
vulnerable | 2026-06-08 05:50:39.975040 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40743 |
vulnerable | 2026-06-08 05:48:28.053905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37392 |
vulnerable | 2026-06-08 05:47:12.740516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32749 |
vulnerable | 2026-06-08 05:44:45.737810 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31780 |
vulnerable | 2026-06-08 05:44:42.232296 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31779 |
vulnerable | 2026-06-08 05:44:42.229865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31778 |
vulnerable | 2026-06-08 05:44:42.228213 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28129 |
vulnerable | 2026-06-08 05:42:44.087428 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25763 |
vulnerable | 2026-06-08 05:41:49.396544 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44759 |
vulnerable | 2026-06-08 05:36:47.480828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44040 |
vulnerable | 2026-06-08 05:36:44.807181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43082 |
vulnerable | 2026-06-08 05:36:42.252901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41585 |
vulnerable | 2026-06-08 05:35:20.770952 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38161 |
vulnerable | 2026-06-08 05:32:55.571330 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37150 |
vulnerable | 2026-06-08 05:32:53.433672 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37149 |
vulnerable | 2026-06-08 05:32:53.433131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37148 |
vulnerable | 2026-06-08 05:32:53.432546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37147 |
vulnerable | 2026-06-08 05:32:53.431930 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35474 |
vulnerable | 2026-06-08 05:32:48.750101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32567 |
vulnerable | 2026-06-08 05:32:07.451338 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32566 |
vulnerable | 2026-06-08 05:32:07.450944 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32565 |
vulnerable | 2026-06-08 05:32:07.449927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27577 |
vulnerable | 2026-06-08 05:31:21.796551 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9494 |
vulnerable | 2026-06-08 05:28:02.080310 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8040 |
vulnerable | 2026-06-08 05:12:05.126657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8022 |
vulnerable | 2026-06-08 05:12:05.004590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8005 |
vulnerable | 2026-06-08 05:12:04.927923 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8004 |
vulnerable | 2026-06-08 05:12:04.926474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1318 |
vulnerable | 2026-06-08 05:11:17.679565 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11783 |
vulnerable | 2026-06-08 05:10:38.991652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7671 |
vulnerable | 2026-06-08 05:10:05.776045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5660 |
vulnerable | 2026-06-08 05:09:47.781320 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5659 |
vulnerable | 2026-06-08 05:09:47.780147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5396 |
vulnerable | 2026-06-08 05:07:56.928114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.