Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-28129HistoryAug 10, 2022 - 6:15 a.m.
CVE-2022-28129
2022-08-1006:15:08
Debian Security Bug Tracker
security-tracker.debian.org
24
apache
traffic server
input validation
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.003
Percentile
68.0%
Improper Input Validation vulnerability in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | trafficserver | < 9.1.3+ds-1 | trafficserver_9.1.3+ds-1_all.deb |
| Debian | 11 | all | trafficserver | < 8.1.5+ds-1~deb11u1 | trafficserver_8.1.5+ds-1~deb11u1_all.deb |
| Debian | 999 | all | trafficserver | < 9.1.3+ds-1 | trafficserver_9.1.3+ds-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2022-28129
2022-08-10 00:00:00
cvelist
cvelist
CVE-2022-28129 Insufficient Validation of HTTP/1.x Headers
2022-08-10 00:00:00
cve
cve
CVE-2022-28129
2022-08-10 06:15:08
prion
prion
Input validation
2022-08-10 06:15:00
osv
osv
CVE-2022-28129
2022-08-10 06:15:08
trafficserver - security update
2023-01-23 00:00:00
trafficserver - security update
2022-08-12 00:00:00
nvd
nvd
CVE-2022-28129
2022-08-10 06:15:08
veracode
veracode
Improper Input Validation
2022-08-21 02:52:31
cnvd
cnvd
Apache Traffic Server Input Validation Error Vulnerability (CNVD-2023-03926)
2022-08-15 00:00:00
nessus
nessus
Debian DLA-3279-1 : trafficserver - LTS security update
2023-01-23 00:00:00
Debian DSA-5206-1 : trafficserver - security update
2022-08-13 00:00:00
debian
debian
[SECURITY] [DLA 3279-1] trafficserver security update
2023-01-23 11:09:56
[SECURITY] [DSA 5206-1] trafficserver security update
2022-08-12 15:05:18
openvas
openvas
Debian: Security Advisory (DLA-3279-1)
2023-01-24 00:00:00
Apache Traffic Server (ATS) 8.0.0 <= 8.1.4, 9.0.0 <= 9.1.2 Multiple Vulnerabilities
2022-08-11 00:00:00
Fedora: Security Advisory for trafficserver (FEDORA-2022-23043f5a0b)
2022-08-24 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: trafficserver-9.1.3-1.fc36
2022-08-20 01:47:08
[SECURITY] Fedora 35 Update: trafficserver-9.1.3-1.fc35
2022-08-20 01:30:52
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.003
Percentile
68.0%
Related for DEBIANCVE:CVE-2022-28129