Fluid Attacks Database

Description

Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 11	trafficserver	=8.1.1+ds-1.1 \|\| =8.1.1+ds-1.1+deb11u1 \|\| =8.1.5+ds-1~deb11u1 \|\| =8.1.6+ds-1~deb10u1 \|\| =8.1.6+ds-1~deb11u1 \|\| =8.1.7+ds-1~deb11u1 \|\| >=0 <8.1.9+ds-1~deb11u1	8.1.9+ds-1~deb11u1
debian 12	trafficserver	=9.2.0+ds-2 \|\| =9.2.0+ds-2+deb12u1 \|\| =9.2.1+ds-1 \|\| =9.2.2+ds-1 \|\| =9.2.3+ds-1 \|\| >=0 <9.2.3+ds-1+deb12u1	9.2.3+ds-1+deb12u1

Aliases

1. CVE-2022-471852. NVD-2022-471853. OSV-DEBIAN-2022-471854. OSV-2022-471855. SECURITY-TRACKER-CVE-2022-47185

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.