Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Apache Traffic Server — Vulnerabilities & Security Advisories 103

All 103 CVE vulnerabilities found in Apache Traffic Server, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive aggregation of known security vulnerabilities affecting Apache Traffic Server, categorizing them by common weakness type and associated tags. It collects a wide variety of vulnerability records, including but not limited to buffer overflows, improper input validation, and information disclosure flaws, covering all publicly disclosed issues within the specified historical time range. By accessing this resource, users can efficiently track vendor advisories from the Apache Software Foundation, gain a deeper understanding of specific weakness classes and their impact on web caching infrastructure, and review the complete vulnerability history of the product to assess long-term security posture. The data is organized to facilitate quick reference for security analysts, system administrators, and developers who need to evaluate the risk profile of their deployment environments. This collection serves as a centralized repository for detecting patterns in bug fixes and identifying recurring security themes within the codebase. Maintaining awareness of these historical issues is critical for applying appropriate patches and configuring secure settings to mitigate potential threats. The information presented here is derived from official vulnerability databases and vendor releases, ensuring accuracy and reliability for decision-making purposes.

Vendor: Apache Software Foundation

CVE ID Title CVSS Severity Published
CVE-2023-30631 Apache Traffic Server: Configuration option to block the PUSH method in ATS didn't work CWE-20 7.5 - 2023-06-14
CVE-2023-33933 Apache Traffic Server: s3_auth plugin problem with hash calculation CWE-200 7.5 - 2023-06-14
CVE-2022-47184 Apache Traffic Server: The TRACE method can be use to disclose network information CWE-200 7.5 - 2023-06-14
CVE-2022-40743 Apache Traffic Server: Security issues with the xdebug plugin CWE-79 6.1 - 2022-12-19
CVE-2022-37392 Apache Traffic Server: Improperly reading the client requests CWE-754 8.2 - 2022-12-19
CVE-2022-32749 Apache Traffic Server: Improperly handled requests can cause crashes in specific plugins CWE-754 7.5 - 2022-12-19
CVE-2022-31779 Improper HTTP/2 scheme and method validation CWE-20 7.5 - 2022-08-10
CVE-2022-25763 Improper input validation on HTTP/2 headers CWE-444 7.5 - 2022-08-10
CVE-2021-37150 Protocol vs scheme mismatch CWE-20 7.5 - 2022-08-10
CVE-2022-28129 Insufficient Validation of HTTP/1.x Headers CWE-20 7.5 - 2022-08-10
CVE-2022-31778 Transfer-Encoding not treated as hop-by-hop CWE-20 7.5 - 2022-08-10
CVE-2022-31780 HTTP/2 framing vulnerabilities CWE-20 7.5 - 2022-08-10
CVE-2021-44759 Improper authentication vulnerability in TLS origin verification CWE-287 7.7 - 2022-03-23
CVE-2021-44040 HTTP request line fuzzing attacks CWE-20 7.5 - 2022-03-23
CVE-2021-43082 heap-buffer-overflow with stats-over-http plugin CWE-120 9.8 - 2021-11-03
CVE-2021-41585 ATS stops accepting connections on FreeBSD 7.5 - 2021-11-03
CVE-2021-38161 Not validating origin TLS certificate CWE-287 7.7 - 2021-11-03
CVE-2021-37149 Request Smuggling - multiple attacks CWE-20 7.5 - 2021-11-03
CVE-2021-37148 Request Smuggling - transfer encoding validation CWE-20 7.5 - 2021-11-03
CVE-2021-37147 Request Smuggling - LF line ending CWE-20 7.5 - 2021-11-03
CVE-2021-35474 Dynamic stack buffer overflow in cachekey plugin CWE-121 9.8 - 2021-06-30
CVE-2021-32567 Reading HTTP/2 frames too many times CWE-20 7.5 - 2021-06-30
CVE-2021-32566 Specific sequence of HTTP/2 frames can cause ATS to crash CWE-20 7.5 - 2021-06-30
CVE-2021-32565 HTTP Request Smuggling, content length with invalid charters CWE-444 7.5 - 2021-06-29
CVE-2021-27577 Incorrect handling of url fragment leads to cache poisoning CWE-444 7.5 - 2021-06-29
CVE-2021-27737 Apache Traffic Server 安全漏洞 7.5 - 2021-05-14
CVE-2020-17508 Apache Traffic Server 信息泄露漏洞 7.5 - 2021-01-11
CVE-2020-17509 Apache Traffic Server 环境问题漏洞 7.5 - 2021-01-11
CVE-2020-9494 Apache Traffic Server 缓冲区错误漏洞 7.5 - 2020-06-24
CVE-2020-1944 Apache Traffic Server 环境问题漏洞 9.8 - 2020-03-23

All 103 known CVE vulnerabilities affecting Apache Traffic Server with full Chinese analysis, references, and POCs where available.