CVE-2015-5206

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions prior to 5.3.2

Description The issue is related to the HTTP/2 experimental feature in Apache Traffic Server, where an unspecified vulnerability exists due to incorrect handling of HTTP/2 requests. This could allow a remote attacker to impact the confidentiality, integrity, and availability of data.

Recommendations For versions prior to 5.3.2, update to version 5.3.2 or later to resolve the issue. As a temporary workaround, consider disabling the HTTP/2 experimental feature until a patch is available. Restrict access to the HTTP/2 module to minimize the risk of exploitation.