VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 26, 2024· Updated Nov 3, 2025

Apache Traffic Server: Invalid Accept-Encoding can force forwarding requests

CVE-2024-35296

Description

Invalid Accept-Encoding header can cause Apache Traffic Server to fail cache lookup and force forwarding requests.

This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4.

Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue.

Affected products

2
  • Apache/Traffic Serverllm-fuzzy2 versions
    >= 8.0.0, <= 8.1.10 | >= 9.0.0, <= 9.2.4+ 1 more
    • (no CPE)range: >= 8.0.0, <= 8.1.10 | >= 9.0.0, <= 9.2.4
    • (no CPE)range: 8.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.