CVE-2022-28129
Insufficient Validation of HTTP/1.x Headers
Summary
Insufficient Validation of HTTP/1.x Headers
Original description
The description as published by the source.
Improper Input Validation vulnerability in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-28129 trafficserver Fixed in: 8.1.5+ds-1~deb11u1
References
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory debian.org
- web lists.apache.org
- web lists.debian.org