Homepage
About Snyk

Improper Check for Unusual or Exceptional Conditions Affecting trafficserver package, versions <8.1.6+ds-1~deb11u1

Severity

 Recommended
0.0
high
0
10

Snyk's Security Team recommends NVD's CVSS assessment

    Threat Intelligence

    EPSS
    0.16% (54th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-DEBIAN11-TRAFFICSERVER-3177384
  • published 20 Dec 2022
  • disclosed 19 Dec 2022
Report a new vulnerability Found a mistake?

Introduced: 19 Dec 2022

CVE-2022-32749 Open this link in a new tab
CWE-754 Open this link in a new tab

How to fix?

Upgrade Debian:11 trafficserver to version 8.1.6+ds-1~deb11u1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream trafficserver package and not the trafficserver package as distributed by Debian. See How to fix? for Debian:11 relevant fixed versions and status.

Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions.

This issue affects Apache Traffic Server: from 8.0.0 through 9.1.3.

CVSS Scores

version 3.1
Expand this section

NVD

Recommended
7.5 high
  • Attack Vector (AV)
    Network
  • Attack Complexity (AC)
    Low
  • Privileges Required (PR)
    None
  • User Interaction (UI)
    None
  • Scope (S)
    Unchanged
  • Confidentiality (C)
    None
  • Integrity (I)
    None
  • Availability (A)
    High