trafficserver

Direct Vulnerabilities

Known vulnerabilities in the trafficserver package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Improper Access Control	*
L Incorrect Behavior Order	*
L Use After Free	*
L HTTP Request Smuggling	*
L HTTP Request Smuggling	*
C Use After Free	*
L HTTP Request Smuggling	*
L Out-of-bounds Read	*
M Regular Expression without Anchors	*
L Improper Input Validation	*
L Stack-based Buffer Overflow	*
C Deserialization of Untrusted Data	*
C Out-of-bounds Write	*
L Resource Exhaustion	*
H Out-of-bounds Write	*
L Server-Side Request Forgery (SSRF)	*
C CVE-2026-33267	*
C Stack-based Buffer Overflow	*
L Integer Overflow or Wraparound	*
L Incorrect Authorization	*
L Improper Access Control	*
L Out-of-bounds Write	*
H Out-of-bounds Write	*
L Resource Exhaustion	*
L Information Exposure	*
L NULL Pointer Dereference	*
L Improper Certificate Validation	*
L Memory Leak	*
L Improper Certificate Validation	*
L Uncontrolled Recursion	*
L Incorrect Authorization	*
H Improper Input Validation	*
L HTTP Request Smuggling	*
L Stack-based Buffer Overflow	*
L Resource Exhaustion	*
L Stack-based Buffer Overflow	*
L Stack-based Buffer Overflow	*
L Out-of-bounds Write	*
M HTTP Request Smuggling	*
L Resource Exhaustion	*
L Always-Incorrect Control Flow Implementation	<9.2.5+ds-0+deb12u4
L HTTP Request Smuggling	<9.2.5+ds-0+deb12u4
L Improper Access Control	<9.2.5+ds-0+deb12u3
L Resource Exhaustion	<9.2.5+ds-0+deb12u3
L HTTP Request Smuggling	<9.2.5+ds-0+deb12u3
L CVE-2024-56195	<9.2.5+ds-0+deb12u2
L CVE-2024-56202	<9.2.5+ds-0+deb12u2
L CVE-2024-38311	<9.2.5+ds-0+deb12u2
L CVE-2024-38479	<9.2.5+ds-0+deb12u2
L Improper Input Validation	<9.2.5+ds-0+deb12u2
L Unchecked Return Value	<9.2.5+ds-0+deb12u2
H HTTP Request Smuggling	<9.2.5+ds-0+deb12u1
H CVE-2024-35296	<9.2.5+ds-0+deb12u1
H HTTP Request Smuggling	<9.2.5+ds-0+deb12u1
L CVE-2024-31309	<9.2.4+ds-0+deb12u1
H Improper Input Validation	<9.2.3+ds-1+deb12u1
H Information Exposure	<9.2.3+ds-1+deb12u1
H CVE-2023-44487	<9.2.3+ds-1+deb12u1
C HTTP Request Smuggling	<9.2.3+ds-1+deb12u1
H Improper Input Validation	<9.2.3+ds-1+deb12u1
H Information Exposure	<9.2.0+ds-2+deb12u1
H Improper Input Validation	<9.2.0+ds-2+deb12u1
H Information Exposure	<9.2.0+ds-2+deb12u1
M Improper Check for Unusual or Exceptional Conditions	<9.1.4+ds-1
M Cross-site Scripting (XSS)	<9.1.4+ds-1
H Improper Check for Unusual or Exceptional Conditions	<9.1.4+ds-1
H Improper Input Validation	<9.1.3+ds-1
H Improper Input Validation	<9.1.3+ds-1
H Improper Input Validation	<9.1.3+ds-1
H Improper Input Validation	<9.1.3+ds-1
H Improper Input Validation	<9.1.3+ds-1
H HTTP Request Smuggling	<9.1.3+ds-1
H Improper Authentication	<9.1.0+ds-1
H Improper Input Validation	<9.1.2+ds-1
H Improper Authentication	<9.1.0+ds-1
H Improper Input Validation	<9.1.1+ds-1
H Improper Input Validation	<9.1.1+ds-1
C Buffer Overflow	<9.1.1+ds-1
H Improper Input Validation	<9.1.1+ds-1
H Improper Input Validation	<8.1.1+ds-1.1
C Out-of-bounds Write	<8.1.1+ds-1.1
H Improper Input Validation	<8.1.1+ds-1.1
H HTTP Request Smuggling	<8.1.1+ds-1.1
H HTTP Request Smuggling	<8.1.1+ds-1.1
H HTTP Request Smuggling	<8.1.1+ds-1
H Information Exposure	<8.1.1+ds-1
H Out-of-Bounds	<8.0.8+ds-1
H Resource Exhaustion	<8.0.7+ds-1
C HTTP Request Smuggling	<8.0.6+ds-1
C HTTP Request Smuggling	<8.0.6+ds-1
C HTTP Request Smuggling	<8.0.6+ds-1
H Improper Input Validation	<8.0.5+ds-1
H Allocation of Resources Without Limits or Throttling	<8.0.5+ds-1
H Allocation of Resources Without Limits or Throttling	<8.0.5+ds-1
H Allocation of Resources Without Limits or Throttling	<8.0.5+ds-1
H Resource Exhaustion	<8.0.5+ds-1
H Information Exposure	<8.0.2+ds-1
H Improper Input Validation	<7.0.0-1
M Resource Exhaustion	<7.1.4+ds-1
M Exposure of Resource to Wrong Sphere	<7.1.4+ds-1
M HTTP Request Smuggling	<7.1.4+ds-1
H Improper Input Validation	<7.1.4+ds-1
H Improper Input Validation	<7.1.2+ds-1
H Improper Input Validation	<7.1.2+ds-1
C Out-of-Bounds	<5.3.1-1
C Improper Access Control	<5.0.0-1
C CVE-2015-5168	<6.0.0-1
C CVE-2015-5206	<6.0.0-1
H Improper Input Validation	<7.0.0-1
H Resource Management Errors	<7.0.0-1
M Out-of-Bounds	<5.2.0-1
L CVE-2014-3525	<5.0.1-1
M Out-of-Bounds	<3.0.4-1

Vulnerability

Vulnerable Version

Improper Access Control