CVE-2022-31779
Improper HTTP/2 scheme and method validation
Summary
Improper HTTP/2 scheme and method validation
Original description
The description as published by the source.
Improper Input Validation vulnerability in HTTP/2 header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-31779 trafficserver Fixed in: 8.1.5+ds-1~deb11u1
References
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory debian.org
- web lists.apache.org