CVE-2022-25763
Improper input validation on HTTP/2 headers
Summary
Improper input validation on HTTP/2 headers
Original description
The description as published by the source.
Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-25763 trafficserver Fixed in: 8.1.5+ds-1~deb11u1
References
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory debian.org
- web lists.apache.org