trafficserver

Direct Vulnerabilities

Known vulnerabilities in the trafficserver package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
HTTP Request Smuggling

*
  • L
HTTP Request Smuggling

*
  • L
Improper Input Validation

*
  • C
Deserialization of Untrusted Data

*
  • L
Resource Exhaustion

*
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Write

*
  • L
Out-of-bounds Write

*
  • L
Information Exposure

*
  • M
Regular Expression without Anchors

*
  • C
Out-of-bounds Write

*
  • L
Improper Certificate Validation

*
  • L
Resource Exhaustion

*
  • L
Out-of-bounds Write

*
  • C
Stack-based Buffer Overflow

*
  • L
Incorrect Behavior Order

*
  • L
Stack-based Buffer Overflow

*
  • L
Use After Free

*
  • L
HTTP Request Smuggling

*
  • L
NULL Pointer Dereference

*
  • L
Improper Access Control

*
  • C
CVE-2026-33267

*
  • L
Server-Side Request Forgery (SSRF)

*
  • L
Integer Overflow or Wraparound

*
  • L
Uncontrolled Recursion

*
  • L
Memory Leak

*
  • L
Stack-based Buffer Overflow

*
  • C
Use After Free

*
  • L
Out-of-bounds Read

*
  • L
Incorrect Authorization

*
  • L
Incorrect Authorization

*
  • L
HTTP Request Smuggling

*
  • L
Stack-based Buffer Overflow

*
  • H
Improper Input Validation

*
  • L
Improper Certificate Validation

*
  • L
Stack-based Buffer Overflow

*
  • L
Resource Exhaustion

*
  • M
HTTP Request Smuggling

*
  • L
Resource Exhaustion

*
  • L
Always-Incorrect Control Flow Implementation

*
  • L
HTTP Request Smuggling

*
  • L
Resource Exhaustion

*
  • L
Improper Access Control

*
  • L
HTTP Request Smuggling

*
  • L
CVE-2024-56195

*
  • L
CVE-2024-38311

*
  • L
CVE-2024-56202

*
  • L
CVE-2024-38479

<8.1.11+ds-0+deb11u2
  • L
Improper Input Validation

*
  • L
Unchecked Return Value

<8.1.11+ds-0+deb11u2
  • H
CVE-2024-35296

<8.1.11+ds-0+deb11u1
  • H
HTTP Request Smuggling

<8.1.11+ds-0+deb11u1
  • H
HTTP Request Smuggling

<8.1.11+ds-0+deb11u1
  • L
CVE-2024-31309

<8.1.10+ds-1~deb11u1
  • H
Information Exposure

<8.1.9+ds-1~deb11u1
  • H
CVE-2023-44487

<8.1.9+ds-1~deb11u1
  • C
HTTP Request Smuggling

<8.1.9+ds-1~deb11u1
  • H
Improper Input Validation

<8.1.9+ds-1~deb11u1
  • H
Information Exposure

<8.1.7+ds-1~deb11u1
  • H
Improper Input Validation

<8.1.7+ds-1~deb11u1
  • H
Information Exposure

<8.1.7+ds-1~deb11u1
  • M
Improper Check for Unusual or Exceptional Conditions

<8.1.6+ds-1~deb11u1
  • H
Improper Check for Unusual or Exceptional Conditions

<8.1.6+ds-1~deb11u1
  • H
Improper Input Validation

<8.1.5+ds-1~deb11u1
  • H
Improper Input Validation

<8.1.5+ds-1~deb11u1
  • H
Improper Input Validation

<8.1.5+ds-1~deb11u1
  • H
Improper Input Validation

<8.1.5+ds-1~deb11u1
  • H
Improper Input Validation

<8.1.5+ds-1~deb11u1
  • H
HTTP Request Smuggling

<8.1.5+ds-1~deb11u1
  • H
Improper Authentication

<8.1.1+ds-1.1+deb11u1
  • H
Improper Input Validation

<8.1.1+ds-1.1+deb11u1
  • H
Improper Authentication

<8.1.1+ds-1.1+deb11u1
  • H
Improper Input Validation

<8.1.1+ds-1.1+deb11u1
  • H
Improper Input Validation

<8.1.1+ds-1.1+deb11u1
  • H
Improper Input Validation

<8.1.1+ds-1.1+deb11u1
  • H
Improper Input Validation

<8.1.1+ds-1.1
  • C
Out-of-bounds Write

<8.1.1+ds-1.1
  • H
Improper Input Validation

<8.1.1+ds-1.1
  • H
HTTP Request Smuggling

<8.1.1+ds-1.1
  • H
HTTP Request Smuggling

<8.1.1+ds-1.1
  • H
HTTP Request Smuggling

<8.1.1+ds-1
  • H
Information Exposure

<8.1.1+ds-1
  • H
Out-of-Bounds

<8.0.8+ds-1
  • H
Resource Exhaustion

<8.0.7+ds-1
  • C
HTTP Request Smuggling

<8.0.6+ds-1
  • C
HTTP Request Smuggling

<8.0.6+ds-1
  • C
HTTP Request Smuggling

<8.0.6+ds-1
  • H
Improper Input Validation

<8.0.5+ds-1
  • H
Allocation of Resources Without Limits or Throttling

<8.0.5+ds-1
  • H
Allocation of Resources Without Limits or Throttling

<8.0.5+ds-1
  • H
Allocation of Resources Without Limits or Throttling

<8.0.5+ds-1
  • H
Resource Exhaustion

<8.0.5+ds-1
  • H
Information Exposure

<8.0.2+ds-1
  • H
Improper Input Validation

<7.0.0-1
  • M
Resource Exhaustion

<7.1.4+ds-1
  • M
Exposure of Resource to Wrong Sphere

<7.1.4+ds-1
  • M
HTTP Request Smuggling

<7.1.4+ds-1
  • H
Improper Input Validation

<7.1.4+ds-1
  • H
Improper Input Validation

<7.1.2+ds-1
  • H
Improper Input Validation

<7.1.2+ds-1
  • C
Out-of-Bounds

<5.3.1-1
  • C
Improper Access Control

<5.0.0-1
  • C
CVE-2015-5206

<6.0.0-1
  • C
CVE-2015-5168

<6.0.0-1
  • H
Improper Input Validation

<7.0.0-1
  • H
Resource Management Errors

<7.0.0-1
  • M
Out-of-Bounds

<5.2.0-1
  • L
CVE-2014-3525

<5.0.1-1
  • M
Out-of-Bounds

<3.0.4-1