CVE-2015-5168

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 5.3.x through 5.3.1

Description The issue is related to the HTTP/2 experimental feature in Apache Traffic Server. It is caused by incorrect handling of HTTP/2 requests. Exploitation of this issue may allow a remote attacker to impact the confidentiality, integrity, and availability of data.

Recommendations For Apache Traffic Server versions 5.3.x through 5.3.1, update to version 5.3.2 or later to resolve the issue.