Known vulnerabilities in trafficserver (Debian package)
Vendor:
Debian
Software:
trafficserver (Debian package)
Software CPE:
cpe:2.3:o:debian:trafficserver_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
51
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.2.5+ds-0+deb12u4
8.0.2+ds-1+deb10u7
8.1.1+ds-1.1
8.1.6+ds-1~deb10u1
8.1.7-0+deb10u1
8.1.7-0+deb10u2
8.1.7-0+deb10u3
8.1.7-0+deb10u4
8.1.11+ds-0+deb11u1
8.1.11+ds-0+deb11u2
9.1.0+ds-1
9.1.0+ds-2
9.1.1+ds-1
9.1.1+ds-1+b1
9.1.1+ds-1+b2
9.1.1+ds-2
9.1.2+ds-1
9.1.2+ds-1+b1
9.1.2+ds-2
9.1.2+ds-3
9.1.2+ds-4
9.1.2+ds-5
9.1.2+ds-6
9.1.2+ds-7
9.1.2+ds-7+b1
9.1.2+ds-8
9.1.2+ds-9
9.1.2+ds-10
9.1.2+ds-11
9.1.2+ds-12
9.1.2+ds-13
9.1.3+ds-1
9.1.3+ds-2
9.1.3+ds-2+b1
9.1.3+ds-3
9.1.4+ds-1
9.2.0+ds-2
9.2.0+ds-2+deb12u1
9.2.1+ds-1
9.2.1+ds-1+b1
9.2.2+ds-1
9.2.3+ds-1
9.2.3+ds-1+deb12u1+b1
9.2.3+ds-1+deb12u1+b2
9.2.4+ds-1
9.2.4+ds-2
9.2.5+ds-1
9.2.5+ds-0+deb12u3
9.2.5+ds-0+deb12u2
9.2.5+ds-0+deb12u1
9.2.4+ds-0+deb12u1
8.1.10+ds-1~deb11u1
9.2.3+ds-1+deb12u1
8.1.9+ds-1~deb11u1
9.2.0+ds-1~deb12u1
8.1.7+ds-1~deb11u1
8.1.6+ds-1~deb11u1
8.1.5+ds-1~deb11u1
8.1.1+ds-1.1+deb11u1
8.0.2+ds-1+deb10u6
8.0.2+ds-1+deb10u5
8.0.2+ds-1+deb10u4
8.1.1+ds
8.1.1+ds-1
8.1.0+ds-2
8.1.0+ds
8.1.0+ds-1
8.0.8+ds
8.0.8+ds-2
8.0.8+ds-1
8.0.2+ds-1+deb10u3
2.1.5-unstable-1+b1
6.0.0-2+b1
6.1.1-1+b1
7.1.2+ds-2+b1
7.1.2+ds-3+b1
7.1.3+ds-2+b1
7.1.3+ds-4+b1
8.0.3+ds-3+b1
8.0.5+ds-2+b1
8.0.2+ds-1+deb10u2
8.0.7+ds
8.0.6+ds
8.0.2+ds
7.1.6+ds
8.0.7+ds-1
8.0.6+ds-1
8.0.5+ds-3
8.0.5+ds-2
8.0.2+ds-1+deb10u1
8.0.5+ds-1
8.0.3+ds-4
8.0.3+ds-3
8.0.3+ds-2
8.0.3+ds-1
7.1.6+ds-1~bpo9+1
7.1.6+ds-1~bpo9+2
8.0.2+ds-1
8.0.1-4
8.0.1-3
8.0.1-2
8.0.1-1
8.0.0-4
8.0.0-3
8.0.0-2
8.0.0-1
5.2.0-3
6.2.0-1~bpo8+1
7.0.0-6+deb9u2
7.1.3+ds-1
7.1.3+ds-2
7.1.3+ds-3
7.1.3+ds-4~bpo9+1
7.1.3+ds-4
7.1.4+ds-1~bpo9+1
7.1.4+ds-1
7.1.2+ds-3~bpo9+1
7.1.2+ds-3
7.1.2+ds-2
7.1.2+ds-1
7.1.1-1
7.0.0-6+deb9u1
5.0.1-1~bpo70+1
7.0.0-5
3.2.4-1
3.2.5-1
4.1.2-1
4.1.2-1.1
4.1.2-1.2
5.0.0-1
5.0.1-1
5.1.0-1
5.1.1-1
5.2.0-1
5.2.0-2
5.3.0-1
5.3.0-2
5.3.1-1
6.0.0-1
6.0.0-2
6.0.0-3
6.1.0-1
6.1.1-1
6.2.0-1
7.0.0-1
7.0.0-2
7.0.0-3
7.0.0-4
7.0.0-4~bpo8+1
2.1.5-unstable-1
2.1.8-unstable-1
2.1.9-unstable-1
3.0.0-1
3.0.1-1
3.0.1-2
3.0.2-1
3.0.4-1
3.0.4-1.1
3.0.5-1
3.2.0-1
3.2.0-2
3.3.0-1
3.3.0+git20121208-0exp1
3.3.2-1
Vulnerabilities (51)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU111269 - Resource exhaustion CVE-2025-49763 |
CWE-400 | Medium | 9.2.5+ds-0+deb12u3 | 18.06.2025 |
SB2025061830 SB2025062501 SB20250704134 and 3 more |
||
| #VU111268 - Security Features CVE-2025-31698 |
CWE-254 | Medium | 9.2.5+ds-0+deb12u3 | 18.06.2025 |
SB2025061830 SB2025062501 SB20250704134 and 2 more |
||
| #VU107429 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-53868 |
CWE-444 | Medium | 9.2.5+ds-0+deb12u3 | 14.04.2025 |
SB2025041439 SB2025041443 SB2025041444 and 6 more |
||
| #VU107428 - Improper Access Control CVE-2024-56195 |
CWE-284 | Medium | 9.2.5+ds-0+deb12u2 | 14.04.2025 |
SB2025041438 SB2025041441 SB2025041448 and 2 more |
||
| #VU107426 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-38311 |
CWE-444 | Medium | 9.2.5+ds-0+deb12u2 | 14.04.2025 |
SB2025041438 SB2025041441 SB2025041448 and 1 more |
||
| #VU107418 - Resource exhaustion CVE-2024-56202 |
CWE-400 | Medium | 9.2.5+ds-0+deb12u2 | 14.04.2025 |
SB2025041438 SB2025041441 SB2025041448 and 1 more |
||
| #VU100503 - Improper input validation CVE-2024-38479 |
CWE-20 | Medium | 9.2.5+ds-0+deb12u2 | 14.11.2024 |
SB2024111440 SB2024111444 SB2024111445 and 6 more |
||
| #VU100502 - Improper input validation CVE-2024-50305 |
CWE-20 | Medium | 9.2.5+ds-0+deb12u2 | 14.11.2024 |
SB2024111440 SB2024111444 SB2024111445 and 7 more |
||
| #VU100501 - Unchecked Return Value CVE-2024-50306 |
CWE-252 | Low | 9.2.5+ds-0+deb12u2 | 14.11.2024 |
SB2024111440 SB2024111444 SB2024111445 and 6 more |
||
| #VU96509 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-35296 |
CWE-444 | Medium | 9.2.5+ds-0+deb12u1 | 26.08.2024 |
SB2024081226 SB2024082632 SB2024082633 and 4 more |
||
| #VU95787 - Improper input validation CVE-2024-35161 |
CWE-20 | High | 9.2.5+ds-0+deb12u1 | 12.08.2024 |
SB2024081226 SB2024082632 SB2024082633 and 3 more |
||
| #VU95786 - Improper input validation CVE-2023-38522 |
CWE-20 | Medium | 9.2.5+ds-0+deb12u1 | 12.08.2024 |
SB2024081226 SB2024082632 SB2024082633 and 3 more |
||
| #VU88113 - Resource exhaustion CVE-2024-31309 |
CWE-400 | Medium | 8.1.10+ds-1~deb11u1, 9.2.4+ds-0+deb12u1 | 04.04.2024 |
SB2024040404 SB2024040406 SB2024040407 and 5 more |
||
| #VU82989 - Improper input validation CVE-2023-39456 |
CWE-20 | Medium | 8.1.9+ds-1~deb11u1, 9.2.3+ds-1+deb12u1 | 10.11.2023 |
SB2023111062 SB2023111063 SB2023111065 and 6 more |
||
| #VU82988 - Exposure of sensitive information to an unauthorized actor CVE-2023-41752 |
CWE-200 | Medium | 8.1.9+ds-1~deb11u1, 9.2.3+ds-1+deb12u1 | 10.11.2023 |
SB2023111062 SB2023111063 SB2023111065 and 5 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 8.1.9+ds-1~deb11u1, 9.2.3+ds-1+deb12u1 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU79783 - Improper input validation CVE-2023-33934 |
CWE-20 | Medium | 8.1.9+ds-1~deb11u1, 9.2.3+ds-1+deb12u1 | 21.08.2023 |
SB2023082131 SB2023111063 |
||
| #VU79782 - Improper input validation CVE-2022-47185 |
CWE-20 | Medium | 8.1.9+ds-1~deb11u1, 9.2.3+ds-1+deb12u1 | 21.08.2023 |
SB2023082131 SB2023111063 SB2025082245 |
||
| #VU79781 - Exposure of sensitive information to an unauthorized actor CVE-2023-33933 |
CWE-200 | Medium | 8.1.7+ds-1~deb11u1, 9.2.0+ds-1~deb12u1 | 21.08.2023 |
SB2023082130 SB2023082132 SB2023082154 and 7 more |
||
| #VU79780 - Configuration CVE-2023-30631 |
CWE-16 | Low | 8.1.7+ds-1~deb11u1, 9.2.0+ds-1~deb12u1 | 21.08.2023 |
SB2023082130 SB2023082132 SB2023082154 and 4 more |
Showing elements 1 - 20 out of 51