← All advisories

High severity7.5NVD Advisory· Published Apr 17, 2017· Updated Jun 17, 2026

CVE-2016-5396

CVE-2016-5396

Description

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Apache/Traffic Server6 versions
cpe:2.3:a:apache:traffic_server:6.0.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:apache:traffic_server:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:traffic_server:6.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:traffic_server:6.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:traffic_server:6.2.0:*:*:*:*:*:*:*
- (no CPE)range: 6.0.0 - 6.2.0
- (no CPE)range: 6.0.0 to 6.2.0

Patches

Vulnerability mechanics

References

3

issues.apache.org/jira/browse/TS-5019nvdIssue TrackingPatchThird Party Advisory
www.securityfocus.com/bid/97945nvd
www.securitytracker.com/id/1038275nvd

News mentions

0

No linked articles in our index yet.