Unrated

Apache Traffic Server: Request smuggling via pipelining after a chunked message body

CVE-2024-38311 First seen on SecPulse Mar 6, 2025

Fix status by distribution

Fixed packages published by each distribution for this CVE

Original description The description as published by the source.

Improper Input Validation vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3.

Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

NVD OSV