Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-31778HistoryAug 10, 2022 - 6:15 a.m.
CVE-2022-31778
2022-08-1006:15:08
Debian Security Bug Tracker
security-tracker.debian.org
19
cve-2022-31778
input validation
apache traffic server
poisoning
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.002
Percentile
60.1%
Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.2.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | trafficserver | < 9.1.3+ds-1 | trafficserver_9.1.3+ds-1_all.deb |
| Debian | 11 | all | trafficserver | < 8.1.5+ds-1~deb11u1 | trafficserver_8.1.5+ds-1~deb11u1_all.deb |
| Debian | 999 | all | trafficserver | < 9.1.3+ds-1 | trafficserver_9.1.3+ds-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2022-31778
2022-08-10 00:00:00
cnvd
cnvd
Apache Traffic Server Input Validation Error Vulnerability (CNVD-2023-03925)
2022-08-15 00:00:00
openvas
openvas
Apache Traffic Server (ATS) 8.0.0 <= 8.1.4 Improper Input Validation Vulnerability
2022-08-11 00:00:00
Debian: Security Advisory (DLA-3385-1)
2023-04-11 00:00:00
Debian: Security Advisory (DSA-5206-1)
2022-08-14 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2022-08-21 02:46:35
cvelist
cvelist
CVE-2022-31778 Transfer-Encoding not treated as hop-by-hop
2022-08-10 00:00:00
prion
prion
Input validation
2022-08-10 06:15:00
cve
cve
CVE-2022-31778
2022-08-10 06:15:08
osv
osv
CVE-2022-31778
2022-08-10 06:15:08
trafficserver - security update
2023-04-05 00:00:00
trafficserver - security update
2022-08-12 00:00:00
nvd
nvd
CVE-2022-31778
2022-08-10 06:15:08
nessus
nessus
Debian DLA-3385-1 : trafficserver - LTS security update
2023-04-10 00:00:00
Debian DSA-5206-1 : trafficserver - security update
2022-08-13 00:00:00
debian
debian
[SECURITY] [DLA 3385-1] trafficserver security update
2023-04-05 22:00:47
[SECURITY] [DSA 5206-1] trafficserver security update
2022-08-12 15:05:18
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.002
Percentile
60.1%
Related for DEBIANCVE:CVE-2022-31778