CVE-2024-50305
Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.
- Score
- CVSS 3.1 7.5 High
- Status
- Analyzed - security@apache.org
- Published
- 2024-11-14
- Last modified
- 2024-11-14
- Weaknesses
- CWE-120, CWE-20
Affected products
References
- https://lists.apache.org/thread/y15fh6c7kyqvzm0f9odw7c5jh4r4np0y