Unrated
Apache Traffic Server: Valid Host field value can cause crashes
CVE-2024-50305
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-50305 trafficserver
Original description The description as published by the source.
Valid Host header field can cause Apache Traffic Server to crash on some platforms.
This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.
Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.
References
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov