Expected Behavior Violation Affecting trafficserver package, versions *
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-DEBIAN11-TRAFFICSERVER-9299101
- published7 Mar 2025
- disclosed6 Mar 2025
Introduced: 6 Mar 2025
NewCVE-2024-56202 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
There is no fixed version for Debian:11 trafficserver.
NVD Description
Note: Versions mentioned in the description apply only to the upstream trafficserver package and not the trafficserver package as distributed by Debian.
See How to fix? for Debian:11 relevant fixed versions and status.
Expected Behavior Violation vulnerability in Apache Traffic Server.
This issue affects Apache Traffic Server: from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3.
Users are recommended to upgrade to versions 9.2.9 or 10.0.4 or newer, which fixes the issue.