SB2024081226 - Multiple vulnerabilities in Apache Traffic Server

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2024081226

SB2024081226 - Multiple vulnerabilities in Apache Traffic Server

Published: August 12, 2024 Updated: August 26, 2024

Security Bulletin ID SB2024081226
Severity
High
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

High 33% Medium 67%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.


1) Input validation error (CVE-ID: CVE-2023-38522)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the affected application accepts characters that are not allowed for HTTP field names and forwards malformed requests to origin servers. A remote attacker can perform the request smuggling and cache poisoning attacks.


2) Input validation error (CVE-ID: CVE-2024-35161)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the affected application forwards malformed HTTP chunked trailer section to origin servers. A remote attacker can perform the request smuggling and cache poisoning attacks.


3) Inconsistent interpretation of HTTP requests (CVE-ID: CVE-2024-35296)

The vulnerability allows a remote attacker to perform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP requests. A remote attacker can send a specially crafted HTTP request to the server and smuggle arbitrary HTTP headers.

Successful exploitation of vulnerability may allow an attacker to poison HTTP cache and perform phishing attacks.


Remediation

Install update from vendor's website.

References