CVE-2024-35161CWE-444

Apache Traffic Server: Incomplete check for chunked trailer section allows request smuggling

Critical · published July 26, 2024

CVSS v3.1
9.1
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

Apache Traffic Server forwards malformed HTTP chunked trailer section to origin servers. This can be utilized for request smuggling and may also lead cache poisoning if the origin servers are vulnerable.

This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4.

Users can set a new setting (proxy.config.http.drop_chunked_trailers) not to forward chunked trailer section.

Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00970 · 61.5th percentile
Weakness
CWE-444 · Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Published
2024-07-26T09:10Z
EPSS history
Timeline
  • 26 JUL 09:10Z
    Apache Traffic Server: Incomplete check for chunked trailer section allows request smuggling
    cvelistv5