CPE Details
Apache Software Foundation Traffic Server 9.2.10 Release Candidate 0
9.2.10
2025-04-24
15h48 +00:00
15h48 +00:00
2025-04-24
15h48 +00:00
15h48 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:apache:traffic_server:9.2.10:rc0:*:*:*:*:*:*
Informations
Vendor
apacheProduct
traffic_serverVersion
9.2.10Update
rc0Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| ACL configured in ip_allow.config or remap.config does not use IP addresses that are provided by PROXY protocol. Users can use a new setting (proxy.config.acl.subjects) to choose which IP addresses to use for the ACL if Apache Traffic Server is configured to accept PROXY protocol. This issue affects undefined: from 10.0.0 through 10.0.6, from 9.0.0 through 9.2.10. Users are recommended to upgrade to version 9.2.11 or 10.0.6, which fixes the issue. | 7.5 |
High |
||
| ESI plugin does not have the limit for maximum inclusion depth, and that allows excessive memory consumption if malicious instructions are inserted. Users can use a new setting for the plugin (--max-inclusion-depth) to limit it. This issue affects Apache Traffic Server: from 10.0.0 through 10.0.5, from 9.0.0 through 9.2.10. Users are recommended to upgrade to version 9.2.11 or 10.0.6, which fixes the issue. | 7.5 |
High |
