Apache Traffic Server Improper Input Validation Vulnerability (CVE-2023-39456)

Description

Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames.This issue affects Apache Traffic Server: from 9.0.0 through 9.2.2. Users are recommended to upgrade to version 9.2.3, which fixes the issue.

Remediation

References

CVE-2023-39456

Related Vulnerabilities

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-3171)

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.26)

Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.7)

WordPress Plugin 404 SEO Redirection SQL Injection (1.0)

WebLogic CVE-2017-10147 Vulnerability (CVE-2017-10147)

Severity

High

Classification

CVE-2023-39456 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H