Unrated
Apache Traffic Server: s3_auth plugin problem with hash calculation
CVE-2023-33933
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-33933 trafficserver Fixed in: 8.1.7+ds-1~deb11u1
Original description The description as published by the source.
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: from 8.0.0 through 9.2.0.
8.x users should upgrade to 8.1.7 or later versions
9.x users should upgrade to 9.2.1 or later versions
References
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory debian.org
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org