PT-2025-9863 · Apache+1 · Apache Traffic Server+1

Ben Kallus

·

CVE-2024-38311

·

Published

2025-03-05

·

Updated

2025-04-05

CVSS v2.0

6.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 8.1.11 Apache Traffic Server versions 9.0.0 through 9.2.8 Apache Traffic Server versions 10.0.0 through 10.0.3
Description The issue is related to Improper Input Validation. Users are advised to upgrade to resolve the issue.
Recommendations Upgrade to version 9.2.9 or 10.0.4 to fix the issue.

Exploit

Fix

DoS

HTTP Request/Response Smuggling

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-444CWE-20

Related Identifiers

BDU:2025-02430
CVE-2024-38311
DSA-5896-1
OESA-2025-1289
OESA-2025-1290

Affected Products

Apache Traffic Server
Debian