Known vulnerabilities in trafficserver - page 2

Vendor: openEuler
Software: trafficserver
Software CPE: cpe:2.3:o:openeuler:trafficserver:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 61
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting trafficserver trafficserver is affected by 61 known vulnerabilities: 16 high, 44 medium, 1 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145206 - Resource exhaustion
CVE-2026-59173		 CWE-400 Medium
No
No
 9.2.15-1 25.08.2026 SB20260824137
SB2026082580
SB2026082581
and 5 more
#VU144899 - Resource exhaustion
CVE-2026-65324		 CWE-400 Medium
No
No
 9.2.15-1 24.08.2026 SB20260824179
SB20260824184
SB20260824185
and 5 more
#VU144900 - Stack-based buffer overflow
CVE-2026-33930		 CWE-121 Medium
No
No
 9.2.15-1 24.08.2026 SB20260824179
SB20260824184
SB20260824185
and 5 more
#VU144901 - Improper control of a resource through its lifetime
CVE-2026-65100		 CWE-664 Medium
No
No
 9.2.15-1 24.08.2026 SB20260824179
SB20260824184
SB20260824185
and 5 more
#VU144902 - Improper Certificate Validation
CVE-2026-65325		 CWE-295 High
No
No
 9.2.15-1 24.08.2026 SB20260824179
SB20260824184
SB20260824185
and 5 more
#VU144784 - Memory corruption
CVE-2026-58186		 CWE-119 High
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 7 more
#VU144785 - Server-Side Request Forgery (SSRF)
CVE-2026-58189		 CWE-918 Medium
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 5 more
#VU144786 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-24033		 CWE-444 High
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 5 more
#VU144790 - Improper input validation
CVE-2026-58183		 CWE-20 Medium
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 7 more
#VU144791 - Use After Free
CVE-2026-58185		 CWE-416 Medium
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 7 more
#VU144793 - Out-of-bounds write
CVE-2026-58187		 CWE-787 Medium
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 5 more
#VU144760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33267		 CWE-444 High
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 5 more
#VU144761 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-58150		 CWE-444 High
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 5 more
#VU144765 - Permissive Regular Expression
CVE-2026-22068		 CWE-625 High
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 6 more
#VU144769 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-57834		 CWE-444 High
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 5 more
#VU144771 - Incorrect Comparison
CVE-2026-41920		 CWE-697 High
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 5 more
#VU144775 - Memory corruption
CVE-2026-58184		 CWE-119 Medium
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 5 more
#VU144776 - Memory corruption
CVE-2026-58188		 CWE-119 High
No
No
 9.2.15-1 24.08.2026 SB20260824137
SB20260824184
SB20260824185
and 5 more
#VU111269 - Resource exhaustion
CVE-2025-49763		 CWE-400 Medium
No
No
 9.1.4-5, 9.2.11-1 18.06.2025 SB2025061830
SB2025062501
SB20250704134
and 3 more
#VU79782 - Improper input validation
CVE-2022-47185		 CWE-20 Medium
No
No
 9.1.4-4 21.08.2023 SB2023082131
SB2023111063
SB2025082245


Showing elements 21 - 40 out of 61