ГлавнаяУязвимости → CVE-2024-38479
7.5высокая

CVE-2024-38479

→ есть в БДУ: BDU:2024-10897 (на русском)
Описание (на английском; русское — в БДУ выше)

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.

Затрагиваемое ПО
Apache Traffic server
CVSS
Балл7.5 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Источники
https://lists.apache.org/thread/y15fh6c7kyqvzm0f9odw7c5jh4r4np0yhttps://lists.debian.org/debian-lts-announce/2025/02/msg00018.html