Fedora EPEL 9 update for trafficserver



Risk High
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2023-38522
CVE-2024-35161
CVE-2024-35296
CWE-ID CWE-20
CWE-444
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe 		Fedora
Operating systems & Components / Operating system

trafficserver
Operating systems & Components / Operating system package or component

Vendor Fedoraproject

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Input validation error

EUVDB-ID: #VU95786

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-38522

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the affected application accepts characters that are not allowed for HTTP field names and forwards malformed requests to origin servers. A remote attacker can perform the request smuggling and cache poisoning attacks.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Fedora: 9

trafficserver: before 9.2.5-1.el9

CPE2.3 External links

http://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-504d1abdb5


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Input validation error

EUVDB-ID: #VU95787

Risk: High

CVSSv3.1: 7.9 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-35161

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the affected application forwards malformed HTTP chunked trailer section to origin servers. A remote attacker can perform the request smuggling and cache poisoning attacks.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Fedora: 9

trafficserver: before 9.2.5-1.el9

CPE2.3 External links

http://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-504d1abdb5


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Inconsistent interpretation of HTTP requests

EUVDB-ID: #VU96509

Risk: Medium

CVSSv3.1: 5.3 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-35296

CWE-ID: CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP requests. A remote attacker can send a specially crafted HTTP request to the server and smuggle arbitrary HTTP headers.

Successful exploitation of vulnerability may allow an attacker to poison HTTP cache and perform phishing attacks.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Fedora: 9

trafficserver: before 9.2.5-1.el9

CPE2.3 External links

http://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-504d1abdb5


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###