Known vulnerabilities in Apache Traffic Server - page 5

Software CPE: cpe:2.3:a:apache_foundation:apache_ats:*:*:*:*:*:*:*:*
Total vulnerabilities: 96
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Traffic Server Apache Traffic Server is affected by 96 known vulnerabilities: 19 high, 70 medium, 7 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU54464 - Stack-based buffer overflow
CVE-2021-35474
CWE-121 High
No
No
8.1.2, 9.0.2 30.06.2021 SB2021063020
SB2021081714
#VU54462 - Improper input validation
CVE-2021-32566
CWE-20 Medium
No
No
8.1.2, 9.0.2 30.06.2021 SB2021063020
SB2021081714
#VU54458 - Improper input validation
CVE-2021-27737
CWE-20 Low
No
No
9.0.1 30.06.2021 SB2021063018
#VU48817 - Improper input validation
CVE-2020-17509
CWE-20 Medium
No
No
7.1.11, 8.0.8 08.12.2020 SB2020120802
SB2020120804
#VU48816 - Missing release of memory after effective lifetime
CVE-2020-17508
CWE-401 Medium
No
No
7.1.12, 8.1.1 08.12.2020 SB2020120803
SB2020120804
#VU29356 - Resource exhaustion
CVE-2020-9494
CWE-400 Medium
No
No
7.1.11, 8.0.8 29.06.2020 SB2020062906
SB2021040723
SB2022040522
and 2 more
#VU27375 - Resource Management Errors
CVE-2020-9481
CWE-399 Medium
No
No
7.1.10, 8.0.7 28.04.2020 SB2020042805
SB2020050404
#VU26349 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-17565
CWE-444 Medium
No
No
7.1.9, 8.0.6 24.03.2020 SB2020032414
SB2020050404
#VU26348 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-17559
CWE-444 Medium
No
No
7.1.9, 8.0.6 24.03.2020 SB2020032414
SB2020050404
#VU26347 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-1944
CWE-444 Medium
No
No
7.1.9, 8.0.6 24.03.2020 SB2020032414
SB2020050404
#VU14570 - Improper input validation
CVE-2018-8040
CWE-20 Low
No
No
6.2.3, 7.1.4 30.08.2018 SB2018083006
SB2018090303
#VU14569 - Improper input validation
CVE-2018-8004
CWE-20 Low
No
No
6.2.3, 7.1.4 30.08.2018 SB2018083006
SB2018090303
#VU14568 - Exposure of sensitive information to an unauthorized actor
CVE-2018-8005
CWE-200 Low
No
No
6.2.3, 7.1.4 30.08.2018 SB2018083006
SB2018090303
#VU14567 - Improper input validation
CVE-2018-8022
CWE-20 Medium
No
No
6.2.3 30.08.2018 SB2018083006
#VU14566 - Improper input validation
CVE-2018-1318
CWE-20 Medium
No
No
6.2.3, 7.1.4 30.08.2018 SB2018083006
SB2018090303
#VU10861 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2017-5660
CWE-113 Low
No
No
6.2.2, 7.1.2 07.03.2018 SB2018022707
SB2018030211


Showing elements 81 - 100 out of 96