CVE-2024-50305CWE-20

Apache Traffic Server: Valid Host field value can cause crashes

High · published November 14, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

Valid Host header field can cause Apache Traffic Server to crash on some platforms.

This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.

Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00927 · 60.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-11-14T09:54Z
EPSS history
Timeline
  • 14 NOV 09:54Z
    Apache Traffic Server: Valid Host field value can cause crashes
    cvelistv5