Unrated

Apache Traffic Server: Invalid Range header causes a crash

CVE-2022-47185 First seen on SecPulse Aug 9, 2023

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2022-47185 trafficserver Fixed in: 8.1.9+ds-1~deb11u1

Original description The description as published by the source.

Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory lists.apache.org
advisory nvd.nist.gov
advisory debian.org
web lists.debian.org
web lists.fedoraproject.org

Key facts

Severity: Unrated
Published: Aug 9, 2023
First seen on SecPulse: Aug 9, 2023
CWE: CWE-20

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:57