Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5549 advisory.

  - Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic     Server.This issue affects Apache Traffic Server: through 9.2.1. (CVE-2022-47185)

  - Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue     affects Apache Traffic Server: through 9.2.1. (CVE-2023-33934)

  - Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames.This issue     affects Apache Traffic Server: from 9.0.0 through 9.2.2. Users are recommended to upgrade to version     9.2.3, which fixes the issue. (CVE-2023-39456)

  - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Traffic Server.This     issue affects Apache Traffic Server: from 8.0.0 through 8.1.8, from 9.0.0 through 9.2.2. Users are     recommended to upgrade to version 8.1.9 or 9.2.3, which fixes the issue. (CVE-2023-41752)

  - The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation     can reset many streams quickly, as exploited in the wild in August through October 2023. (CVE-2023-44487)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3595 advisory.

  - Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic     Server.This issue affects Apache Traffic Server: through 9.2.1. (CVE-2022-47185)

  - Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue     affects Apache Traffic Server: through 9.2.1. (CVE-2023-33934)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-dcbfbf1396 advisory.

    Update to upstream 9.2.2.

    Changes with Apache Traffic Server 9.2.2       #9544 - Docs: format typos in header_rewrite doc       #9754 - Fix OCSP detection during build (9.2.x)       #9829 - Add TSHttpTxnNextHopPortGet, add NEXT-HOP to header rewrite       #9831 - Allow slice plugin to purge requests       #9840 - Fix crash on config reload with BoringSSL       #9877 - Do not add content-length for status 204 cache       #9879 - doc: fix the internal libraries section formatting       #9886 - Fix deprecated set_class for documentation build       #9943 - Add yaml libs reference to HTTP proxy test suite.
      #9944 - Fix clang-format for 9.2.x branch       #9952 - 92x autest updates       #9959 - 9.2.x: OpenSSL 3.0 tls autest updates (#9947)       #9971 - Update to autest version 1.10.3       #9976 - fix: require RSRC_CLIENT_REQUEST_HEADERS in ConditionMethod       #9989 - Do not set @SECLEVEL with boringssl       #10038 - LSan: Fix leaks of Cache Unit Test       #10054 - Demote SSL log line to debug and remove key printing       #10093 - tools/check-unused-dependencies:  make exceptions for tools under clang+asan       #10103 - autest get_port: update to use psutil       #10105 - Update autest to the latest 1.10.4       #10107 - Fix ports.py type hint for sets on older Python       #10124 - Fix DbgCtl reference that got cherry-picked into 9.2.x       #10125 - Remove duplicate slashes at the beginning of the incoming URL       #10127 - 9.2.x: Correctly handle encoding for cache hash generation       #10131 - 9.2.x: Fix a crash triggered by invalid range header



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184442	Debian DSA-5549-1 : trafficserver - security update	Nessus	Debian Local Security Checks	critical
182405	Debian DLA-3595-1 : trafficserver - LTS security update	Nessus	Debian Local Security Checks	critical
179959	Fedora 38 : trafficserver (2023-dcbfbf1396)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2022-47185

high

Tenable Plugins

critical

critical

critical