Apache Software Foundation Traffic Server 2.1.8

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:traffic_server:2.1.8:*:*:*:*:*:*:*

part: a version: 2.1.8 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductTraffic Server (c0ff314f-21c5-5e35-91ea-c5f580192191)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/trafficserver purl2cpe 2026-06-01 10:14:32.810865
pkg:deb/debian/trafficserver purl2cpe 2026-06-01 10:14:32.810866
pkg:deb/ubuntu/trafficserver purl2cpe 2026-06-01 10:14:32.810868
pkg:github/alibaba/trafficserver purl2cpe 2026-06-01 10:14:32.810869
pkg:github/apache/trafficserver purl2cpe 2026-06-01 10:14:32.810871
pkg:maven/org.apache.trafficserver/trafficserver purl2cpe 2026-06-01 10:14:32.810872
pkg:rpm/opensuse/apache-trafficserver purl2cpe 2026-06-01 10:14:32.810873

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3525 vulnerable 2026-06-08 05:05:33.235144 Details available
Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks.
Published: 2014-08-22T14:00:00.000Z
Updated: 2024-08-06T10:50:16.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0256 vulnerable 2026-06-08 05:00:40.304965 Details available
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.
Published: 2012-03-26T14:00:00.000Z
Updated: 2024-08-06T18:16:20.089Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.