CVE-2022-31778
Transfer-Encoding not treated as hop-by-hop
Summary
Transfer-Encoding not treated as hop-by-hop
Original description
The description as published by the source.
Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.2.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-31778 trafficserver Fixed in: 8.1.5+ds-1~deb11u1
References
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- web lists.apache.org
- web lists.debian.org