Description
Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through 9.2.14. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 11 | | =8.1.1+ds-1.1 || =8.1.1+ds-1.1+deb11u1 || =8.1.10+ds-1~deb11u1 || =8.1.11+ds-0+deb11u1 || =8.1.11+ds-0+deb11u2 || =8.1.5+ds-1~deb11u1 || =8.1.6+ds-1~deb10u1 || =8.1.6+ds-1~deb11u1 || =8.1.7+ds-1~deb11u1 || =8.1.9+ds-1~deb11u1 || =9.1.0+ds-1 || =9.1.0+ds-2 || =9.1.1+ds-1 || =9.1.1+ds-2 || =9.1.2+ds-1 || =9.1.2+ds-10 || =9.1.2+ds-11 || =9.1.2+ds-12 || =9.1.2+ds-13 || =9.1.2+ds-2 || =9.1.2+ds-3 || =9.1.2+ds-4 || =9.1.2+ds-5 || =9.1.2+ds-6 || =9.1.2+ds-7 || =9.1.2+ds-8 || =9.1.2+ds-9 || =9.1.3+ds-1 || =9.1.3+ds-2 || =9.1.3+ds-3 || =9.1.4+ds-1 || =9.2.0+ds-1 || =9.2.0+ds-1~deb12u1 || =9.2.0+ds-2 || =9.2.1+ds-1 || =9.2.2+ds-1 || =9.2.3+ds-1 || =9.2.4+ds-1 || =9.2.4+ds-2 || =9.2.5+ds-1 |
debian 12 | | =9.2.0+ds-2 || =9.2.0+ds-2+deb12u1 || =9.2.1+ds-1 || =9.2.2+ds-1 || =9.2.3+ds-1 || =9.2.3+ds-1+deb12u1 || =9.2.4+ds-0+deb12u1 || =9.2.4+ds-1 || =9.2.4+ds-2 || =9.2.5+ds-0+deb12u1 || =9.2.5+ds-0+deb12u2 || =9.2.5+ds-0+deb12u3 || =9.2.5+ds-0+deb12u4 || =9.2.5+ds-1 |
